5 ms·
I don't understand how so many internet connected device's manufacturers don't even think to check if they have an open ports, especially an open SSH port. Or
by laken 9y ago
I don't understand how so many internet connected device's manufacturers don't even think to check if they have an open ports, especially an open SSH port. Or is it that they just don't care? I can't tell anymore.
- monocasa 9y agoTry and probe a big ISP switch sometime. They're generally running an ancient unpatched Linux and SSH with known vulnerabilities. They don't care about their own crap, much less yours.
- X86BSD 9y agoAnd until we have liability laws written to hold them accountable for not maintaining the security of their products this will continue to be the case.
- deleted 9y ago[deleted]
- mrguyorama 9y agoA lot of these things are done for "support" reasons. For example, someone I know works for one of the big cable internet providers. To paraphrase him: What they can do to your modem remotely is terrifying. I know for one thing, My modem is an Arris SBG6580. For some reason, it seems that I don't have the ability as an individual to update/change/modify my own hardware. This is hardware I purchased outright, instead of leased telcom hardware, yet the only way it will ever be updated/patched is if my ISP pushes an update through (I believe) DOCSIS commands. Of course, when all the individual companies created different backdoors for support, and now are all purchasing each other, it's likely many of the backdoors get forgotten or ignored.
- closeparen 9y agoWhich is why businesses typically run their own "edge" firewall gear between their own networks and ISP customer-premise equipment.
- mrguyorama 9y agoI wish I didn't have to run thousands of dollars worth of tech just to be in control of MY own hardware that I purchased outright