Search found 13 matches

by Neptune
Wed Nov 08, 2017 4:57 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

You're right, it isn't. And I would be shocked if Melvin knew that. All he did was copy-paste a response that someone else made three weeks ago (taken from a reply by rdkis):

Image
by Neptune
Wed Nov 08, 2017 4:37 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Hello entresec, Thank you for the detailed post. This issue is already under the review of our R&D team. We hope to come up with a fix pretty soon. We will keep you updated on the status. Wow. We are five pages into this thread that was started October 16th and multiple people have discussed th...
by Neptune
Wed Oct 25, 2017 5:04 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

@rdkis, thank you. I appreciate you chiming in to share your knowledge and concern, as well as pointing out conjecture where you see it. Looking at posts of t84a in other threads, I get the impression that they are usually trying to be helpful to this forum and that is great. However, in this thread...
by Neptune
Wed Oct 25, 2017 11:39 am
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Our main attack is against the 4-way handshake of the WPA2 protocol. This handshake is executed when a client wants to join a protected Wi-Fi network, and is used to confirm that both the client and access point possess the correct credentials (e.g. the pre-shared password of the network). This ess...
by Neptune
Mon Oct 23, 2017 5:05 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Just looking at Amazon I have found Amcrest cameras as high as $775 and Arlo cameras as low as $84. So, there is definitely an overlap in the price range. Netgear has stated they will be patching the Arlo cameras automatically. I don't own one, so I cannot tell you if they have pushed the update yet...
by Neptune
Mon Oct 23, 2017 4:26 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Here you go, Netgear Arlo cameras. That took me all of 3 minutes to find. Next time why don't you Google around yourself? https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-2836-PSV-2017-2837 I am well aware that there are many, many unpatched devices...
by Neptune
Mon Oct 23, 2017 3:15 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

I hear you but you imply that others have patched their devices while they have not. These are $60-$80 cameras. Commercial IP cameras go for about $1500 each. I get where you're going but be realistic. Amcrest is no Google or Apple. As I posted earlier, nothing from Asus. You would think they would...
by Neptune
Mon Oct 23, 2017 11:17 am
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Well, androids are not protected nor are the majority of devices. While I feel your pain, I'd say over 80% of the devices are still vulnerable. Andriods are NOT safe. Apple is in BETA. ASUS has released nothing. If you're that concerned, stop using all your wifi devices. No one isreally protected y...
by Neptune
Fri Oct 20, 2017 3:31 pm
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

Buy a Fingbox and it will alert you if someone tries to create a fake network. Right now, every attempt to block ths threat is in beta or nonexistent. Also understand, someone has to be physically in range of your wifi to do this. You can block the threat by patching your client devices against the...
by Neptune
Thu Oct 19, 2017 11:54 am
Forum: General Security Chat
Topic: Amcrest products and KRACK vulnerability
Replies: 62
Views: 14938

Re: Amcrest products and KRACK vulnerability

It is quite concerning how little awareness Amcrest has shown regarding this issue in the responses that have been provided. the KRACK vulnerability is mainly a client-side issue, and only impact routers that are acting as bridges and thus need to act as a client to another router. Yes, the handshak...