Send mesh mailing list submissions to
        mesh@lists.sudoroom.org

To subscribe or unsubscribe via the World Wide Web, visit
        https://sudoroom.org/lists/listinfo/mesh
or, via email, send a message with subject or body 'help' to
        mesh-request@lists.sudoroom.org

You can reach the person managing the list at
        mesh-owner@lists.sudoroom.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of mesh digest..."


Today's Topics:

   1. KRACK attack (Marc Juul)
   2. Re: KRACK attack (danarauz@gmail.com)


----------------------------------------------------------------------

Message: 1
Date: Tue, 17 Oct 2017 15:52:57 -0700
From: Marc Juul <juul@labitat.dk>
To: "mesh@lists.sudoroom.org" <mesh@lists.sudoroom.org>
Subject: [Mesh] KRACK attack
Message-ID:
        <CAL4ejvQ4hPDyuMGDWwKd4wL-c0ZTLtP28+mde7dqo2b2=RQ01A@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

You have all probably already heard about the wifi KRACK attack. If not,
here is the lowdown:

  https://www.krackattacks.com/

sudowrt is also affected. What this means is that your private wifi network
is... potentially a lot less private.

I started work on a fix here:

  https://github.com/sudomesh/sudowrt-firmware/issues/109

but I ran into a build issue which maybe Grant knows how to fix?

  https://github.com/sudomesh/sudowrt-firmware/issues/110

Hopefully we can sort this out over the next day or two.

In the mean time node-operates may want to disconnect any sensitive devices
from their private network. As always you should be using end-to-end
encryption for all communications. Install the HTTPS Everywhere
<https://www.eff.org/https-everywhere> browser extension if you haven't.
For situations where end-to-end encryption is not viable, using a VPN like
Mullvad <https://www.mullvad.net/> is a good idea.

--
marc/juul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sudoroom.org/pipermail/mesh/attachments/20171017/423e344a/attachment-0001.html>

------------------------------

Message: 2
Date: Tue, 17 Oct 2017 17:54:05 -0700
From: "danarauz@gmail.com" <danarauz@gmail.com>
To: Marc Juul <juul@labitat.dk>
Cc: "mesh@lists.sudoroom.org" <mesh@lists.sudoroom.org>
Subject: Re: [Mesh] KRACK attack
Message-ID:
        <CAPMS6zbMXLYT924sOh48WxU6uh6DBg0Of4kOF-pFJ1VeHE1K1w@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

https://www.eff.org/https-everywhere

https://mullvad.net/




On Tue, Oct 17, 2017 at 3:52 PM, Marc Juul <juul@labitat.dk> wrote:

> You have all probably already heard about the wifi KRACK attack. If not,
> here is the lowdown:
>
>   https://www.krackattacks.com/
>
> sudowrt is also affected. What this means is that your private wifi
> network is... potentially a lot less private.
>
> I started work on a fix here:
>
>   https://github.com/sudomesh/sudowrt-firmware/issues/109
>
> but I ran into a build issue which maybe Grant knows how to fix?
>
>   https://github.com/sudomesh/sudowrt-firmware/issues/110
>
> Hopefully we can sort this out over the next day or two.
>
> In the mean time node-operates may want to disconnect any sensitive
> devices from their private network. As always you should be using
> end-to-end encryption for all communications. Install the HTTPS Everywhere
> <https://www.eff.org/https-everywhere> browser extension if you haven't.
> For situations where end-to-end encryption is not viable, using a VPN like
> Mullvad <https://www.mullvad.net/> is a good idea.
>
> --
> marc/juul
>
> _______________________________________________
> mesh mailing list
> mesh@lists.sudoroom.org
> https://sudoroom.org/lists/listinfo/mesh
>
>


--
Daniel

Signal: 415.336.9143 <https://whispersystems.org/>

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - -
Help open a people-powered common space in Oakland, California!
https://omnicommons.org/donate
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - -
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sudoroom.org/pipermail/mesh/attachments/20171017/59710f71/attachment-0001.html>

------------------------------

Subject: Digest Footer

_______________________________________________
mesh mailing list
mesh@lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh


------------------------------

End of mesh Digest, Vol 57, Issue 15
************************************