WiFi is absolutely not safe right now (KRACK wifi bug)

[Verbl Kint]

Here’s what you can do to protect yourself from the KRACK WiFi vulnerability | TechCrunch

TL,DR version: be extra extra careful with wifi!! Avoid it for now if you can!

Non-techie version:

• Turn off wifi on your phone when outside your house (especially if you use Android). Do not connect to online shopping and social media when using wifi.
• Avoid social media, email, and definitely stay away from online shopping over wifi.
• Use a third-party router as PLDT, Smart, and Globe have no patch updates at all for their modem/ONU/routers and personal wifi devices.

There have been posts online and in social media already about the KRACK wifi bug and how dangerous it potentially can be. Those posts are absolutely true.

No known pre-built exploit has been made public yet but rest assured that one will be inevitably out, probably soon. MOST wifi devices (including Android phones and commercial routers/access points) are VULNERABLE! And many devices still DO NOT have a patch. PLDT, SMART and GLOBE devices (modem/routers, personal wifi) still DO NOT have a patch.

For network professionals and sysadmins, please note that this is not remotely executable (like a SQL injection) as this can be utilized more for sniffing on client machines than on the server side. This bug will probably be used more for MITM attacks (e.g. wifi pineapple). This, however, can still be leveraged as an attack vector if and when eavesdropping can lead to exposing other vulnerabilities on a network.

Be wary of Linux POS systems (point-of-sale) systems that are on wifi, they need to move to wired ethernet up until this is patched. Turn off wifi on your phone and stay away from social media and online shopping when connected to public hotspots. Enterprise and residential wifi are both equally at risk, btw.

Will post below on companies that have already issued a patch.