- WLUG - wlug.mailman3.com

Re: [Wlug] Major WPA2 Vulnerability
by Chuck Anderson 16 Oct '17

16 Oct '17

On Mon, Oct 16, 2017 at 03:21:29PM -0400, Michael C Voorhis wrote: > Chuck Anderson writes: > > Because none of Fedora's updates aren't actually released yet. They > > are built and undergoing pushing/testing now, but being a public > > distro, anyone can get them if they know where to look: > > Ubuntu released a bunch of WPA-related patches a little after noontime > today, it appears. > > John Stoffel: > > I'm using DD-WRT on my APs at home, but god do the web pages and > > forums suck for actually figuring out what version to run and > > whether it's patched or not. Sigh... > > Ditto for OpenWRT, it appears the project is still alive, but you'd > never know, looking at their website. I may switch to LEDE, which > confusingly appears to be a fork of OpenWRT which is trying to merge > back with OpenWRT....? LEDE does a bunch of faster-paced development with the goal of having their work eventually merged back into OpenWRT. They often experiment with different ideas/features.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Michael C Voorhis 16 Oct '17

16 Oct '17

Chuck Anderson writes: > Because none of Fedora's updates aren't actually released yet. They > are built and undergoing pushing/testing now, but being a public > distro, anyone can get them if they know where to look: Ubuntu released a bunch of WPA-related patches a little after noontime today, it appears. John Stoffel: > I'm using DD-WRT on my APs at home, but god do the web pages and > forums suck for actually figuring out what version to run and > whether it's patched or not. Sigh... Ditto for OpenWRT, it appears the project is still alive, but you'd never know, looking at their website. I may switch to LEDE, which confusingly appears to be a fork of OpenWRT which is trying to merge back with OpenWRT....? --MCV.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Krichevsky, Nicholas Jacob 16 Oct '17

16 Oct '17

Looks like they were just pushed to stable about 30 minutes ago. I don't have the update yet but I'm sure it's a matter of time. https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: wlug-bounces(a)mail.wlug.org <wlug-bounces(a)mail.wlug.org> on behalf of Chuck Anderson <cra(a)WPI.EDU> Sent: Monday, October 16, 2017 2:11:05 PM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] Major WPA2 Vulnerability Because none of Fedora's updates aren't actually released yet. They are built and undergoing pushing/testing now, but being a public distro, anyone can get them if they know where to look: https://bugzilla.redhat.com/buglist.cgi?quicksearch=krack&list_id=7995606 https://bodhi.fedoraproject.org/updates/?packages=wpa_supplicant https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-12e76e8364 https://koji.fedoraproject.org/koji/packageinfo?packageID=717 On Mon, Oct 16, 2017 at 12:06:34PM -0400, Eric Martin wrote: > Here's a comprehensive write up with the latest fixes, and it's getting > updated regularly: > > https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… > > I'm not sure how Fedora can have an update and also not have released any > info... > > On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > > Hey Gang, > > > > If you haven't heard already, it appears someone has found a major flaw in > > WPA2! > > > > https://www.krackattacks.com/ > > > > Hopefully patches should be forth coming! > > > > Later, > > Tim. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Chuck Anderson 16 Oct '17

16 Oct '17

Because none of Fedora's updates aren't actually released yet. They are built and undergoing pushing/testing now, but being a public distro, anyone can get them if they know where to look: https://bugzilla.redhat.com/buglist.cgi?quicksearch=krack&list_id=7995606 https://bodhi.fedoraproject.org/updates/?packages=wpa_supplicant https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-12e76e8364 https://koji.fedoraproject.org/koji/packageinfo?packageID=717 On Mon, Oct 16, 2017 at 12:06:34PM -0400, Eric Martin wrote: > Here's a comprehensive write up with the latest fixes, and it's getting > updated regularly: > > https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… > > I'm not sure how Fedora can have an update and also not have released any > info... > > On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > > Hey Gang, > > > > If you haven't heard already, it appears someone has found a major flaw in > > WPA2! > > > > https://www.krackattacks.com/ > > > > Hopefully patches should be forth coming! > > > > Later, > > Tim.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by John Stoffel 16 Oct '17

16 Oct '17

>>>>> "Eric" == Eric Martin <eric.joshua.martin(a)gmail.com> writes: Eric> Aruba posted a really good write up as well as patches, and I just updated iOS Eric> on my phone though I haven’t seen the typical security email from Apple. Don’t Eric> forget, upgrade the client side as well! I'm using DD-WRT on my APs at home, but god do the web pages and forums suck for actually figuring out what version to run and whether it's patched or not. Sigh...

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Eric Martin 16 Oct '17

16 Oct '17

Here's a comprehensive write up with the latest fixes, and it's getting updated regularly: https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… I'm not sure how Fedora can have an update and also not have released any info... On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > Hey Gang, > > If you haven't heard already, it appears someone has found a major flaw in > WPA2! > > https://www.krackattacks.com/ > > Hopefully patches should be forth coming! > > Later, > Tim. > > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- Eric Martin

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Eric Martin 16 Oct '17

16 Oct '17

Aruba posted a really good write up as well as patches, and I just updated iOS on my phone though I haven’t seen the typical security email from Apple. Don’t forget, upgrade the client side as well! Thank you, -- Eric > On Oct 16, 2017, at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > Hey Gang, > > If you haven't heard already, it appears someone has found a major flaw in WPA2! > > https://www.krackattacks.com/ > > Hopefully patches should be forth coming! > > Later, > Tim. > > > -- > I am leery of the allegiances of any politician who refers to their constituents as "consumers". > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

1 0

Major WPA2 Vulnerability
by Tim Keller 16 Oct '17

16 Oct '17

Hey Gang, If you haven't heard already, it appears someone has found a major flaw in WPA2! https://www.krackattacks.com/ Hopefully patches should be forth coming! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Reminder: Meeting Oct 12th 2017 @7pm Topic: Ansible
by Tim Keller 11 Oct '17

11 Oct '17

Hey Everybody, We've got a meeting on Thursday! Location: WPI Student Center Mid Century Room (rm 331) I'm going to do a quick talk on "Ansible". Ansible is a tool that lets you script a complex set of tasks into a playbook that you can then run 1 machine or a million. Snacks and refreshments will be provided and then we'll head off for pizza at tech to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] 3d printing question.
by John Stoffel 09 Oct '17

09 Oct '17

I've heard good things about the monoprice one they have. I've been looking at getting a cheap (<$300) engraving machine to learn cad/cam and do some engraving for my scout troop. I figure it's more useful than an eggbot kit in alot of ways.

1 0