3 ms·
I absolutely agree that it is a bad bad bad idea to have admin endpoints for your routers visible to the public internet, and that anyone with real responsibili
by hyperpape 10y ago
I absolutely agree that it is a bad bad bad idea to have admin endpoints for your routers visible to the public internet, and that anyone with real responsibility for networks or infrastructure of any kind needs to know that. Moreover, no matter how much improvement there is in software quality, that will probably remain good advice--why not add an extra layer of protection?
On the other hand, it makes me sad as an industry that it's certain doom if you don't follow that kind of advice. Why don't we have simple web servers that offer secure admin interfaces that can be plugged in for various products? It's not as if the user interface for a router's configuration is bleeding edge technology.
- Pxtl 10y agoYeah, that. It's 2016 and secure embedded web servers still aren't a solved problem. That sucks.
- DanielDent 10y ago>> Why don't we have simple web servers that offer secure admin interfaces that can be plugged in for various products? Agreed >> It's not as if the user interface for a router's configuration is bleeding edge technology. Not sure I agree. Have you seen some of these modern interfaces? They are doing deep packet inspection, providing many different visualizations of usage, geo-location, captive portal, ... the feature list - and attack surface - is huge.
- hyperpape 10y agoHmm, am I confused about this? The devices themselves are sophisticated, but I thought they were compromised via an HTTP admin interface, which I (perhaps badly) assumed is a glorified couple of CRUD screens.