Google and Apple yet to fix Wi-Fi hole in a billion devices
https://www.newscientist.com/article/2150675-google-and-apple-yet-to-fix-wi-fi-hole-in-a-billion-devices/
The WPA2 security protocol has been a mandatory requirement for all devices using the Wi-Fi protocol since 2006, which translates into billions of laptops, mobiles and routers. The weakness identified by Mathy Vanhoef, a digital security researcher at the Catholic University of Leuven (KUL) in Belgium, lies in the way devices running WPA2 encrypt information.
Each time a device joins a network, it exchanges messages with the router in what is known as a “four-way handshake”. Vanhoef, who will present his findings next month at the Association for Computing Machinery’s Conference on Computer and Communications Security in Dallas, Texas, found it is possible to interfere with this handshake.