2

Will Apple provide firmware updates for Airport routers to patch the KRACK vulnerability?

Apple's abandonement of the Airport product line has me worried.

  • Nobody can answer if Apple will do something; that's for Apple to say. However, it's feasible to answer the question has something has been done? See this answer for reference – Allan Oct 16 '17 at 14:22
  • According to Mathy Vanhoef who discovered the vulnerability, it is mainly client devices (phones and computers, not routers) that need a patch. See the section titled "What if there are no security updates for my router?" on https://www.krackattacks.com/. – Jean-François Beauchamp Oct 16 '17 at 16:36
  • @Allan: A negative factual answer is certainly possible. Apple could release a statement that they will not provide patches for certain products because they consider them to have reached end of life. – Christian David Oct 16 '17 at 16:44
  • @ChristianDavid - that's entirely true; I took that position since Apple is notoriously tight lipped about security so until you actually have something, it's speculation at best especially given the forward looking tone of the question. That said...my advice has always to avoid "consumer grade stuff" (Linksys, Netgear, Asus, and yes, even Apple) and get more "enterprise grade" networking. I used to swap things out on a 12-18 month cycle due to failure. Now, I am getting at minimum 3 years on my routers and WAPs – Allan Oct 16 '17 at 18:56
  • https://www.imore.com/krack-wpa2-wi-fi-exploit-already-fixed-ios-macos-tvos-watchos-betas according to press the airport line is not affected. As this appears to be mostly a client-side attack, I'd say there is not much to be done with the router itself in any case. – vykor Oct 16 '17 at 20:53

0 Answers0