KRACK! Wifi's go-to security, WPA2, is fatally flawed, and will probably never be patched in many places
by Cory Doctorow from on (#3566S)
US CERT has privately circulated an advisory warning key stakeholders about the imminent publication of Key Reinstallation Attacks (KRACK), which exploit a heretofore unknown flaw in the WPA2 wifi security protocol, allowing attackers to break the encryption and eavesdrop upon -- and possibly inject packets into -- wireless sessions previously believed to be secure. (more")