KRACK attacks (WPA2 is not secure anymore)

This is the correct answer. A flaw in the RNG of WPA2 has been discovered

Remember: as long as you use https/SSL on sites that support it / force you to, this flaw does not affect your security over those sites.

"As far as I understood the paper WPA2 is not generally broken, only the implementation has weaknesses."

This is true, strictly speaking, but in my understanding the sting in the tail is that it is correct (i.e. fully-conformant) implementations that are the most vulnerable. See http://www.theregister.co.uk/2017/10/17/kracken_patches/ which contains the following:

"Judging from the academics' paper, Windows and iOS are largely unaffected by KRACK in that it is rather difficult to exploit the protocol flaws due to Microsoft and Apple's implementations of WPA2 – and, in any case, patches are either available or incoming. Linux, Android 6.0 and above, OpenBSD 6.1, and macOS 10.12 and 10.9 are most at risk from KRACK's eavesdropping techniques due to the way they handle encryption key reuse in WPA2."

It is true that encrypted (for example HTTPS) traffic can't be tampered with because of this problem, however unencrypted traffic is liable to injection of malicious content.

Try and learn eap-tls (https://wiki.openwrt.org/doc/howto/wireless.security.8021x)

Just a joke. @jolla please create a useful eap-tls interface for the end user. Ansible guys:

---
# tasks file for j-wlan
- name: create wlan file
  template:
    src: templates/wlan.config.j2
    dest: "/var/lib/connman/{{ wlan_name}}.config"
    mode: 0600
  become: true
  tags:
    - wlan

and this template:

[service_{{ wlan_name }}]
Type=wifi
Name={{ wlan_name }}
EAP=tls
CACertFile = /home/nemo/.cert/{{ wlan_cacertfile }}
ClientCertFile = /home/nemo/.cert/{{ wlan_certfile }}
PrivateKeyFile = /home/nemo/.cert/{{ wlan_keyfile }}
PrivateKeyPassphrase = {{ wlan_passphrase }}
Identity = {{ wlan_identity }}

(and of course you need to know what I mean)...

;) Quite. Well truth is history has proven how all wireless communication platforms have become vulnerable over time. GSM, Bluetooth, WEP, NFC, WPS, WPA, WPA2 etc.

It is less about the implementation than is it about the medium itself. When you are broadcasting for the whole world can see don't be surprised if someone finds a way to listen in on it.

@veritanuda that video is laughable.... it shows a simple bruteforce dictionary attack - sth EVERY encryption can be cracked with. in other words WPA has _not_ been insecure until now. at least not after your source