Jim Akin opines that chances are, you’ve got passwords to at least a handful of Wi-Fi networks saved on your smartphone, tablet and laptop. Most of us do, because wireless Internet connections are central to most homes and workplaces.
That’s why a recently uncovered security vulnerability known as KRACK is so significant. It puts the private data of virtually all Wi-Fi users at risk. Here’s some background on the extent of the issue, and guidelines on what you can do to protect yourself and your data.
KRACK is a clunky acronym for a criminal hacking technique (Key Reinstallation AttaCK) that can expose information shared on Wi-Fi networks, even over connections “secured” with data encryption and passwords.
Without delving into the technical specifics, (there’s a good detailed take here if you’re curious), the vulnerability breaks WPA 2, the strongest and most common form of encryption used to protect data on home and business Wi-Fi networks. WPA 2 encryption is designed to maintain private connections so that anyone who hijacks data by “listening in” to a wireless-networking signal without your password (and the permission that implies) receives only unintelligible chunks of information.
KRACK can thwart that, exposing credit card numbers, account usernames and passwords, and other private data that could end up on the dark web, for any criminal to abuse. In certain instances, KRACK can even enable crooks to install malicious code on devices and websites. (See also: What to do if you are infected with malware.)