A massive vulnerability was discovered in the WiFi security protocol today. It's reach is extensive, impacting almost anyone that uses wireless networks. I'm going to try to simplify the situation for you and explain it so that it makes sense. If you'd like to read more, there's a good article from Zdnet that you can checkout here.
So, give me the basics
You've probably connected to a wifi network before, right? That being the case you'll know that there are two kinds of WiFi networks when you go to connect. There are open wifi networks that don't need a password and protected networks that do need a password.
Yep, got it, so what, they found a way to break in?
In a way, yes. Basically, when you use a password and connect to a wifi network, what you're really doing is just encrypting all your network traffic. So imagine that you're an army general and you're sending messages to your commanders. If you connected to a wifi network without a password all your messages could be read by anyone, including the other army. You're a smart general though, so you encrypt your messages before sending them out using a password. So now, if someone tries to look at your messages, they'd need to know how to decipher them before they could read them.
Ok, that makes sense, so what's all the hoopla about?
Well, when you go to encrypt your message, imagine you also lock it in a box before sending it out. Now there are lots of different locks you could use but you of course want the best lock to protect your message. So you put on the best lock you know of, the ubersupersecure lock. It's been a great lock and no one has been able to crack it before. Your messages have always been safe behind that lock.
Yep, I love me that lock, it's good stuff.
Indeed, it has been a great lock. Unfortunately, today we just found out that somebody made a skeleton key for that lock that let's anyone in the world open it.
Oh crap! That doesn't sound good.
Right, now you're starting to see the problem. Basically, every wifi access point is now able to be compromised. That means that someone can open your box and read all your messages.
Ok, so I see the problem now, what do I need to do?
Well, at this point, the good news is that the lock can be fixed and changed so that the skeleton key won't work and you're lock will go back to being unbreakable.
Yeah baby, that's what I'm talking about! How do I get this fix?
Well, this is where it gets a little technical. If you're running Windows or iOS, you're good to go and don't really have to worry about those systems. What you do have to worry about though is your wireless router that creates your wifi network and your android/linux systems if you have them. These devices and operating systems are going to need to be updated with new software before they'll be safe again.
Ok, you're starting to lose me again...
If you're starting to feel a little overwhelmed, just know that you have a serious problem and you'll need to fix it. If you don't feel skilled enough to do it, find that great tech friend you know and buy them some beers to come over and help you out.
So, if I just let this go and do nothing, what's the worst that could happen?
Well, honestly, someone would need to be very skilled to use this exploit at the moment and they would also have to be in range of your wireless network. This isn't a vulnerability that can be used over the internet. They'd have to pull up to your house and sit outside to then break into your wifi. I'd say the likelihood of that happening to you is extremely small. It's really the enterprises, small businesses and your local wifi spots that I'd be worried about. If they don't end up fixing the problem, then at some point down the road you could be using their network and have some not so good stuff go down. So you'll need to be a lot more conscious about what wifi networks you're using, if you care about someone being able to see what you're doing on the network that is.
Alright, well I think I got this now
Cool, hopefully you feel a little more knowledgeable about the subject. If you have any questions though, just ask away in the comments and I'll answer them if I can.
& ZDnet
Some of my other recent posts:
 |  |  |
