4 ms·

It is NOT by mistake. Dlink engineers are INCREDIBLY INCOMPETENT. Let me remind you this excellent piece: http://www.devttys0.com/2015/04/what-the-ridiculous-f

by rasz_pl 11y ago

It is NOT by mistake. Dlink engineers are INCREDIBLY INCOMPETENT. Let me remind you this excellent piece: http://www.devttys0.com/2015/04/what-the-ridiculous-fuck-d-link/ http://www.devttys0.com/2015/04/what-the-ridiculous-fuck-d-l...

dguaraglia 11y ago
Pedant hat on: still a mistake. Driven by shitty engineering, sure, but it wasn't done on purpose.
- jandrese 11y ago
  The best hacks are the ones that look like mistakes. It's the reason plausible deniability is one of the judging criteria in the underhanded C contest.
mahouse 11y ago
Don't say "incompetent" when you mean "they don't give a fuck" or "this software was subcontracted to the India".
- fixermark 11y ago
  "not having or showing the necessary skills to do something successfully" Demonstration of necessary skills failed. Incompetent.
- parennoob 11y ago
  "subcontracted to the India"? With language that poor, people like you deserve to replaced by subcontracting out to "the India".
  - mahouse 11y ago
    I'm sorry, I don't speak English natively. Any correction is welcome.
    - parennoob 11y ago
      What you should be sorry for is your automatic equation of "incompetent" with "subcontracted to 'the' India". That is ridiculous. Why not just say "subcontracted to incompetent devs"? Does your country, whatever it is, have a monopoly on competent developers?
      - mahouse 11y ago
        "subcontracted to 'the' India" is nothing more than a cliché.
userbinator 11y ago
What if they're doing it deliberately, because they personally believe in allowing users to install customised firmware, and feigning ignorance/incompetence? They certainly wouldn't be able to do it "officially", so they work around it. Once everyone else knows, they'll admit their mistake and "fix" the problem, but add another way in? Of course it could just be incompetence, but it's particularly interesting to consider the alternative. Seeing all the other companies who have leaked keys, datasheets, and other useful but officially proprietary information on their products, really makes me wonder. Also, those vulnerabilities which allow for jailbreaking and rooting of locked-down devices? Are they also there deliberately? For some reason, I really hope so.
- rasz_pl 11y ago
  writeup suggests its their global private key, same one used for signing windows apps
BHSPitMonkey 11y ago
Poor decisions are mistakes, not accidents.

by rasz_pl 11y ago

dguaraglia 11y ago

Pedant hat on: still a mistake. Driven by shitty engineering, sure, but it wasn't done on purpose.

jandrese 11y ago
The best hacks are the ones that look like mistakes. It's the reason plausible deniability is one of the judging criteria in the underhanded C contest.

mahouse 11y ago

Don't say "incompetent" when you mean "they don't give a fuck" or "this software was subcontracted to the India".

fixermark 11y ago
"not having or showing the necessary skills to do something successfully" Demonstration of necessary skills failed. Incompetent.
parennoob 11y ago
"subcontracted to the India"? With language that poor, people like you deserve to replaced by subcontracting out to "the India".
- mahouse 11y ago
  I'm sorry, I don't speak English natively. Any correction is welcome.
  - parennoob 11y ago
    What you should be sorry for is your automatic equation of "incompetent" with "subcontracted to 'the' India". That is ridiculous. Why not just say "subcontracted to incompetent devs"? Does your country, whatever it is, have a monopoly on competent developers?
    - mahouse 11y ago
      "subcontracted to 'the' India" is nothing more than a cliché.

userbinator 11y ago

What if they're doing it deliberately, because they personally believe in allowing users to install customised firmware, and feigning ignorance/incompetence? They certainly wouldn't be able to do it "officially", so they work around it. Once everyone else knows, they'll admit their mistake and "fix" the problem, but add another way in? Of course it could just be incompetence, but it's particularly interesting to consider the alternative. Seeing all the other companies who have leaked keys, datasheets, and other useful but officially proprietary information on their products, really makes me wonder. Also, those vulnerabilities which allow for jailbreaking and rooting of locked-down devices? Are they also there deliberately? For some reason, I really hope so.

rasz_pl 11y ago
writeup suggests its their global private key, same one used for signing windows apps

BHSPitMonkey 11y ago

Poor decisions are mistakes, not accidents.