krack hack patch

I learned today that wifi routers (AirPort Extreme) can be hacked with KRACK. Is there a fix for this?

iPhone 6, iOS 8.3

Posted on Oct 16, 2017 3:53 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 19, 2017 5:05 PM

Please, people, educate yourselves. The hack is limited to clients and has to do with the WPA2 4 handshake protocol. The hack is made possible by the CLIENT’s response to the fourth handshake, not the authenticator (router). The flaw has been around since day 1 of the WPA2 implementation. It’s a flaw in how the protocol was implemented. This is NOT an Apple only issue. Any device that uses WPA2 is affected. The router is not the base cause and cannot be hacked unless it acting as a client to another router, something almost no home network does. If you want to educate yourself and find out what’s really going on trying watching this video. It’s about twenty minutes long and will tell you everything you want to know about KRACK in great detail. Apple Wi-Fi clients have all been patched in current beta releases. No need to panic or be paranoid.


https://twit.tv/shows/security-now/episodes/633?autostart=false


Fast forward to the 1:32:08 point and listen.


And finally, Apple has NOT stopped support of its networking products. It was a rumor based on another rumor that claimed Apple was reassigning engineers from its networking products team to other projects. RUMOR only, no verification and no confirmation from Apple. Apple networking products are supported and available at Apple stores, online, and at resellers like Best Buy and Amazon. Like the Mac Mini, the Airport and Time Capsule haven’t seen hardware updates in a few years. That does not mean they are no longer supported so STOP with the babbling nonsense.

32 replies

Oct 16, 2017 4:57 PM in response to LaPastenague

What you say may be true; however, this remains an open vulnerability in Airport and Time Capsule products.

It would prove Apple's commitment to its customers to provide an update to fix this, even more so since they've abandoned the products.

I've been generally very happy with my Airport products, I think my 3TB Time Capsule is the 4th product in the Airport family I've owned starting with the flying model with the modem. The TC has restored a disk once, infrequently provided a needed lost file (maybe a couple of times), and in general done this while remaining invisible. I've had to trash a backup and start over once or maybe twice, but that's it. The Apple Airport products have all be been very good for their time.

I'll keep this thing going until the hard drive fails if Apple updates it.

Otherwise it's out the door in a few weeks.

JIC, I'm gonna be shopping around for a router with some additional security features besides no KRACK. And a new backup system.

Dec 16, 2017 6:36 PM in response to Steven Kutoroff

Just updated my TC to 7.7.9 and I assume that this addresses recent issues that may exist in the TC.

Nice going Apple, I hadn't expected any updates since the product was discontinued.

I shopped for a new router, but found none that did everything I wanted in a replacement. Yet.

BTW - a recent update to Sierra seems to have solved my USB problem on restart that's been a problem since El Capitan. Cheers again. I'd update to High Sierra on this old iMac, but it would kill my old MS-Office.

Oct 16, 2017 6:26 PM in response to LaPastenague

Don't worry, I'm not buying anything unless it has a fix of some sort.

There are a few routers with some network security protection built-in or available as add-ons. I've looked into them and some time ago I had hope that a future Apple Airport would be an industry leader in that too.

I've had Apple's since the MacPlus, but my 2014 Mini has been a major disappointment in so many ways I'm wavering for my next computer, BTW it runs High Sierra. El Capitan was a disaster on my iMac, fixed by Sierra. I can't update the iMac to High Sierra without buying a new version of Office, so my options are open for the future. We pound our Windows PCs at work hard and they never falter.

I hope Tim Cook realizes that brand loyalty has limits.

Nov 1, 2017 4:40 PM in response to AncientGeek

Think about all the users....most of them using 3rd party wireless routers or ISP provided modem/routers....who have purchased an AirPort Express for use with AirPlay. I'll bet that 95% of them connect using wireless.


Most.....maybe 60-70% of Apple users who have set up an AirPort to extend a network are unfortunately using wireless to connect.....because they don't want to run the Ethernet cable.

Nov 1, 2017 4:45 PM in response to Bob Timmons

I suspect you are absolutely right. There are a lot of apartments or old construction that are difficult to wire. I like wire and tend to use Cat-5/6 as much as I can rather than using WiFi, since so many devices are WiFi only these days. I like to keep as much as possible on wire to minimize wireless traffic. I buy 8-port switches for my TV areas so I can connect all of the TV related boxes to the network via wire.

Oct 16, 2017 5:34 PM in response to Steven Kutoroff

JIC, I'm gonna be shopping around for a router with some additional security features besides no KRACK. And a new backup system.

Remember every other router is vulnerable.. not one is excluded.. this is a flaw in the WPA2 spec. Only a couple of companies have even announced firmware updates.. e.g. Ubiquiti and Cisco. As to be expected the more professional companies rather than domestic tend to be ahead of the curve.

Also all the clients are vulnerable.. you can fix the router and still get KRACKED>.. this is not only a router failure.. this is the whole WPA2 spec.


Certainly you can buy an Asus router today.. and use it with VPN.. connect all your wireless devices only through the vpn.. that means if the wireless is cracked.. the packets are still encrypted in the VPN tunnel. Expect about a 30% slow down in your transfer speeds at least.. maybe a lot more.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

krack hack patch

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.