KRACK

Haven't seen anything on here about the KRACK vulnerability that was found a couple days ago. https://www.zdnet.com/article/wpa2-security-flaw-lets-hackers-attack-almost-any-wifi-device/ https://www.eff.org/deeplinks/2017/10/krack-vulnerability-what-you-need-know https://thenextweb.com/security/2017/10/17/krack-explained-like-youre-five-years-old/ List of devices getting patches: http://www.zdnet.com/article/here-is-every-patch-for-krack-wi-fi-attack-available-right-now/ It looks like https traffic is safe (for now), so using something like Https Everywhere should protect your data from this issue. It's a serious issue for older devices/devices from less popular vendors, as they might not ever be patched, but nothing apocalyptic. Thoughts?

>>3000 May be wrong there, but from what I understand https everywhere wouldn't help all that much. What it does is force pages that offer https versions to load that instead of http. It's a good function, and I use it. But there are still a lot of straight out http pages around, and if you access those, httpseverywhere won't be able to do soykaf. You just gotta be manually careful if you're on wifi and not access those at all. Also, there are tons of mixed content pages, with http linked content in https pages. Again, nothing httpseverywhere can do here. You need to straight out block that content. What I know of and use for this purpose is uMatrix but I don't think this option is on by default. As for patches personally I've dowloaded them for the Linux boxes, but I have an android device I need to use for work, and I haven't seen if it got any updated on that regard. Not a huge issue because I already treat it as compromised, since it belongs to Google not me, but this is a tad uglier than the usual datamining so I'd really like to know it's been fixed.