News for hackers. Stuff that matters.

A comment on Over the Air: Exploiting Broadcom’s Wi-Fi Stack. Parent comment

Re:Over the Air: Exploiting Broadcom’s Wi-Fi Stack by IshKebab on Tuesday April 04, 2017 @03:24PM (#14036283)
I may be reading it wrong, but I think you have to be on the same network as the victim. Still, you're right this is very serious.
[ Parent | on HN ]
Re:Over the Air: Exploiting Broadcom’s Wi-Fi Stack by jessaustin on Tuesday April 04, 2017 @03:40PM (#14036440)
Just set your SSID to "attwifi" or "xfinitywifi" or similar, and lots of devices will connect automatically.
[ Parent | on HN ]
Re:Over the Air: Exploiting Broadcom’s Wi-Fi Stack by icambron on Tuesday April 04, 2017 @03:45PM (#14036488)
A worm using this exploit could presumably spread itself as the user hops between networks as part of their routine.
[ Parent | on HN ]
Re:Over the Air: Exploiting Broadcom’s Wi-Fi Stack by kbuck on Tuesday April 04, 2017 @10:57PM (#14039305)
This is the important bit:

> However, much more interestingly, we see that the implementation for [vendor-specific] command #4 seems relevant to our current pursuit. First, it does not require the existence of a TDLS connection in order to be processed!

[ Parent | on HN ]
Re:Over the Air: Exploiting Broadcom’s Wi-Fi Stack by 24gttghh on Tuesday April 04, 2017 @03:47PM (#14036504)
I would agree that TDLS requires a common network over which to broadcast the "Discovery Request" frame.
[ Parent | on HN ]