3 ms·
There's no way to be "safe". You might be safer if you disable UPnP, it certainly decreases the attack surface.
by greglindahl 8y ago
There's no way to be "safe". You might be safer if you disable UPnP, it certainly decreases the attack surface.
- creeble 8y ago> There's no way to be "safe". You're implying that all routers are vulnerable?
- flylikeabanana 8y agoI think the point is that any software system is vulnerable
- creeble 8y agoVulnerable to this particular exploit? Your router is either vulnerable to this exploit, or it's not. Afaict from the article, the exploit relies on a UPnP-enabled router; if UPnP isn't enabled, I don't believe your router is vulnerable.
- kibibu 8y agoNo routers are invulnerable.
- creeble 8y agoTo this exploit?
- creeble 8y agoI'm sorry, I didn't intend to start a nit-pick on whether or not all software contains bugs. My response was too glib. The GP asked: > If I have UPnP disabled, am I safe? The answer is yes: If you can disable UPnP, your router will be safe from this particular exploit. Which is, I think, what he was asking. Everyone should disable UPnP in their routers. It won't make your router "safe" from all exploits, but it will make it safe from this one, and you can do it now, immediately, without replacing hardware or firmware.
- greglindahl 8y agoThanks, my reply wasn't very good either. I suspect most people can disable UPnP without ever noticing a problem. If anything, it is more used by malware than anything you actually want.