3 ms·
OpenWRT forum user data stolen in weekend data breach
- gralx 6y agoThe article sidesteps the question of how this administrator's account was compromised. "Good password not enough" suggests the attacker did not need the password to break in, which would be interesting. Maybe that's all the forum is willing to divulge, but I wish the article had explicitly said so. EDIT: I didn't read the frame. OpenWRT Forum may not know how the attacker compromised the account.
- plugger 6y ago> It is not known how the account was accessed I don't think the question was sidestepped, I just think as of yet they don't know exactly how the account was compromised.
- gralx 6y agoOh - I never read the frame. You're right. My brain processes those things like advertisements and skips right over.
- rendall 6y ago"The intruder used the account of an OpenWRT administrator. The intruder used the account of an OpenWRT administrator." Worth repeating twice. If the post author sees this, there is a typo
- josteink 6y agoActual OpenWRT security advisory here: https://openwrt.org/advisory/2021-01-17-1 https://openwrt.org/advisory/2021-01-17-1