1 ACCEPTED SOLUTION
Accepted Solutions
@Philip144 wrote:
Does Rogers have any protection against this attack in place.
I don't know. The security researcher did a responsible disclosure and vendors have had many months to fix it. However, I'm not overly concerned about FragAttacks because these specific protocol design flaws are difficult to exploit.
Even the web page for the FragAttacks vulnerability confirms this:
Fortunately, the design flaws are hard to abuse because doing so requires user interaction or is only possible when using uncommon network settings. As a result, in practice the biggest concern are the programming mistakes in Wi-Fi products since several of them are trivial to exploit.
I'm not saying that the FragAttacks bugs do not need to be fixed. However, the reality is that if some "bad guy" was really determined to hack you, there are far easier and FAR more effective ways to do so.
@Philip144 wrote:
Does Rogers have any protection against this attack in place.
I don't know. The security researcher did a responsible disclosure and vendors have had many months to fix it. However, I'm not overly concerned about FragAttacks because these specific protocol design flaws are difficult to exploit.
Even the web page for the FragAttacks vulnerability confirms this:
Fortunately, the design flaws are hard to abuse because doing so requires user interaction or is only possible when using uncommon network settings. As a result, in practice the biggest concern are the programming mistakes in Wi-Fi products since several of them are trivial to exploit.
I'm not saying that the FragAttacks bugs do not need to be fixed. However, the reality is that if some "bad guy" was really determined to hack you, there are far easier and FAR more effective ways to do so.
-
1898 views
-
3 Likes
-
-
