[Mesh] mesh Digest, Vol 57, Issue 15

[Eve Edelson]

Thanks for this good advice, Marc!

Meanwhile I will be out for a few weeks, sick this week & running
weirdfilmfest next Tuesday, and possibly/probably in Unsafe Networks, where
the advice will come in handy.

On Wed, Oct 18, 2017 at 12:00 PM, <mesh-request at lists.sudoroom.org> wrote:

> Send mesh mailing list submissions to
>         mesh at lists.sudoroom.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://sudoroom.org/lists/listinfo/mesh
> or, via email, send a message with subject or body 'help' to
>         mesh-request at lists.sudoroom.org
>
> You can reach the person managing the list at
>         mesh-owner at lists.sudoroom.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of mesh digest..."
>
>
> Today's Topics:
>
>    1. KRACK attack (Marc Juul)
>    2. Re: KRACK attack (danarauz at gmail.com)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 17 Oct 2017 15:52:57 -0700
> From: Marc Juul <juul at labitat.dk>
> To: "mesh at lists.sudoroom.org" <mesh at lists.sudoroom.org>
> Subject: [Mesh] KRACK attack
> Message-ID:
>         <CAL4ejvQ4hPDyuMGDWwKd4wL-c0ZTLtP28+mde7dqo2b2=RQ01A@
> mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> You have all probably already heard about the wifi KRACK attack. If not,
> here is the lowdown:
>
>   https://www.krackattacks.com/
>
> sudowrt is also affected. What this means is that your private wifi network
> is... potentially a lot less private.
>
> I started work on a fix here:
>
>   https://github.com/sudomesh/sudowrt-firmware/issues/109
>
> but I ran into a build issue which maybe Grant knows how to fix?
>
>   https://github.com/sudomesh/sudowrt-firmware/issues/110
>
> Hopefully we can sort this out over the next day or two.
>
> In the mean time node-operates may want to disconnect any sensitive devices
> from their private network. As always you should be using end-to-end
> encryption for all communications. Install the HTTPS Everywhere
> <https://www.eff.org/https-everywhere> browser extension if you haven't.
> For situations where end-to-end encryption is not viable, using a VPN like
> Mullvad <https://www.mullvad.net/> is a good idea.
>
> --
> marc/juul
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://sudoroom.org/pipermail/mesh/attachments/
> 20171017/423e344a/attachment-0001.html>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 17 Oct 2017 17:54:05 -0700
> From: "danarauz at gmail.com" <danarauz at gmail.com>
> To: Marc Juul <juul at labitat.dk>
> Cc: "mesh at lists.sudoroom.org" <mesh at lists.sudoroom.org>
> Subject: Re: [Mesh] KRACK attack
> Message-ID:
>         <CAPMS6zbMXLYT924sOh48WxU6uh6DBg0Of4kOF-pFJ1VeHE1K1w at mail.
> gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> https://www.eff.org/https-everywhere
>
> https://mullvad.net/
>
>
>
>
> On Tue, Oct 17, 2017 at 3:52 PM, Marc Juul <juul at labitat.dk> wrote:
>
> > You have all probably already heard about the wifi KRACK attack. If not,
> > here is the lowdown:
> >
> >   https://www.krackattacks.com/
> >
> > sudowrt is also affected. What this means is that your private wifi
> > network is... potentially a lot less private.
> >
> > I started work on a fix here:
> >
> >   https://github.com/sudomesh/sudowrt-firmware/issues/109
> >
> > but I ran into a build issue which maybe Grant knows how to fix?
> >
> >   https://github.com/sudomesh/sudowrt-firmware/issues/110
> >
> > Hopefully we can sort this out over the next day or two.
> >
> > In the mean time node-operates may want to disconnect any sensitive
> > devices from their private network. As always you should be using
> > end-to-end encryption for all communications. Install the HTTPS
> Everywhere
> > <https://www.eff.org/https-everywhere> browser extension if you haven't.
> > For situations where end-to-end encryption is not viable, using a VPN
> like
> > Mullvad <https://www.mullvad.net/> is a good idea.
> >
> > --
> > marc/juul
> >
> > _______________________________________________
> > mesh mailing list
> > mesh at lists.sudoroom.org
> > https://sudoroom.org/lists/listinfo/mesh
> >
> >
>
>
> --
> Daniel
>
> Signal: 415.336.9143 <https://whispersystems.org/>
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> - - - - - - - - - - - -
> Help open a people-powered common space in Oakland, California!
> https://omnicommons.org/donate
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> - - - - - - - - - - - -
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://sudoroom.org/pipermail/mesh/attachments/
> 20171017/59710f71/attachment-0001.html>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> mesh mailing list
> mesh at lists.sudoroom.org
> https://sudoroom.org/lists/listinfo/mesh
>
>
> ------------------------------
>
> End of mesh Digest, Vol 57, Issue 15
> ************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://sudoroom.org/lists/private/mesh/attachments/20171018/28310754/attachment.html>