Sky Q Hub security update

[MrBaconMaker]

Hi

With the recent disclosure of new wi fi vulnerabilities, do we know when/if the sky q hub will be updated to receive this security patch?

Vulnerability here - https://www.fragattacks.com/

[mae-3]

@MrBaconMaker 

The security vulnerabilities primarily impact client devices and most of these have been patched now, Linux systems which the Sky router is written around are not impacted.

[mae-3]

https://www.theregister.com/2021/05/12/krack_hack_wifi/ 

[MrBaconMaker]

Thanks, I hadn't seen that, I was wondering if they would have been applied to the ISP provided router yet as they tend to be notoriously slow at patching (if at all!)

[MrBaconMaker]

Just reading in more detail, it looks like those were patches to the Linux kernel but that doesn't mean they have yet made it downstream to routers

[mae-3 · Accepted solution]

@MrBaconMaker 

The Linux kernel is primarily in the whole OS type of system when it involves client-side/AP wifi vulnerabilities, not server or router and it's with certain wifi adapters. Also, the Sky router has a transparent DNS, so you cannot hijack DNS. I could go on but have read the whole advisory and it doesn't apply to Sky's routers that get firmware patched often.

[MrBaconMaker]

Thanks, as long as the hubs get frequent updates I'm happy as I'm sure they will get any patches soon.

[mae-3]

https://www.fragattacks.com/#details 

Because Sky routers use a DNS transparent proxy DNS cannot be poisoned, so it does not impact Sky routers drastically or more accurately it's mitigated!