3 ms·
Remember that article we had here on HN a few weeks back about Chinese spies infiltrating companies to get company information? It is improbable, but a similar
by NathanKP 17y ago
Remember that article we had here on HN a few weeks back about Chinese spies infiltrating companies to get company information? It is improbable, but a similar thing could have easily been done with this. All they would have to do is get their own code substituted into the production process and they get an instant backdoor into many, many computers.
A more likely scenario, though, is that a tech savvy and angry employee wanted to get back at the company that was about to fire him. Imagine if a DDOS was launched against Energizer using code distributed by one of their own products. Ultimate irony!
I'm not saying either of these theories are legitimate, or even probable, but who knows?
- stcredzero 17y agoI bought a cheap router about 8 years ago that sent all of my DNS requests through some IP address in China.
- kordless 17y agoWhich raises an interesting question. How many people here monitor the link between their router and their cable modem? I certainly don't.
- ShabbyDoo 17y agoI use DD-WRT, so anything malicious from the router provider would have to be in hardware.
- tedunangst 17y agoGood thing hardware doesn't rely on running complicated firmware... :)
- ShabbyDoo 17y agoDD-WRT is the firmware for the most part although I'd bet there's some embedded code running below this Linux-based OS. Is there enough wiggle room "down there" to, say, surreptitiously forward inbound traffic between network segments and back (like a mini NAT)? I have no idea. Does anyone here know anything about the WRT54GL board?
- tedunangst 17y agoThe DD-WRT is just general purpose computer operating system that happens to be configured as a router which Linksys calls firmware to discourage you from tinkering with it. The ethernet and wireless devices, though, have more code, several thousands lines of it, running on slower, low power (but still complex) processors.