WPA2 is about to be ruined

https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/ So apparently WPA2 is getting loads of vulnerabilities. And unlike the WPS vulnerability these seem to be in key parts of the protocol like handshaking ETC... Will this finally prompt people to start the standardisation of WPA3/4(suggesting that WPA3 might be just interim like WPA1 was)?

WPA3/4 is going to take a long time to instate especially considering that the general populace doesn't know how to do a firmware update. I'd estimate about 3 years for it being a manufacturing standard and 1 year for it to be slowly rolled out as firmware to the routers of companies who actually care.

>>2952 Well I don't care much about when the general populace will start using it(sounds like fun times to be honest). I do care when or if IEEE will make WPA3 so I can put it on my router.

I connect to free-wifi networks usually WEP with no actual security. I use the Tor browser liberally. Should I be worried?

>>2954 I connect to insecure wifi networks, change my MAC address, run a vpn and then use the Tor browser. when I'm done, I change my MAC address back. I feel pretty secure that way. Some people have said that running a VPN alongside Tor is a vulnerability though

Manufacture problem -> propose your own solution for said problem I guess it is being done so new protocols are rolled out and people who decide on them don't loose their jobs/positions.

>>2955 I recently started changing my mac address because I read it could be used to uniquely identify you. Didn't know that until then.

>>2954 Any non-encrypted traffic until now was at least encrypted on the network level with WPA2. Now it will be laid bare. In any case you should use WPA2 rather than WEP(can't hurt). Your security onion will be better if you use WPA2 even if its cracked right now.

>>2956 Gee what is your solution? Send everything in cleartext? Technology progresses and encryptions have weaknesses. As time moves on we find the weaknesses, and as technology has progressed we replace the old weakened encryption with new ones.

>>2958 >In any case you should use WPA2 rather than WEP(can't hurt). I think what he was saying is that he connected to WEP networks that he doden't own, though. The reason he uses WEP is because he can crack it and connect easily.

>>2960 Actually I just connect to open networks with wicd. They usually have a login portal or something. But can I enable encryption if I'm not the network owner? Can I still login?

>>2961 If you can get to the router settings sure you can. But doing so would kick out the other users wand would definitely get noticed.

>>2961 100% of open public wifi networks are sniffed in some way.

>>2963 Maybe, but encryption can help on it greatly.