3 ms·
> the worst they can do is shut off your internet No, if your modem gets owned, you are in a whole lot of trouble. You become vulnerable for all sorts of MITM
by LeonM 7y ago
> the worst they can do is shut off your internet
No, if your modem gets owned, you are in a whole lot of trouble.
You become vulnerable for all sorts of MITM attacks. The attacker now also has access to your LAN, which is usually trusted by all devices on it.
- pixl97 7y agoYou mean you're not using end to end certificate based encryption for all your applications these days? And all the pushback we get from people here that DoH/DoT is a bad thing.
- iso1631 7y agoYou're implying we shouldn't bother with firewalls
- satanspastaroll 7y agoNot all applications are, and there are specific automated downgrade attacks for encrypted comms that force some back to plaintext. Giving outsiders access to your internal network is rarely a good idea.
- big_chungus 7y agoMany or most devices don't support this and the average consumer isn't capable of doing it himself.
- MaxBarraclough 7y agoIt's not my applications, but applications that auto-update over unencrypted HTTP. Also, IoT devices with software built by the lowest bidder.
- MaxBarraclough 7y ago> You become vulnerable for all sorts of MITM attacks. The attacker now also has access to your LAN, which is usually trusted by all devices on it. Good points; these two issues are quite different. You could stop the network-access problem by putting an extra router (a secure one) between the modem and your local network, but that wouldn't save you from MITM.