4 ms·

I was initially interested when I first saw this last year, but it turns out to be complete FUD. See http://www.revk.uk/2013/12/paraniod-ravings.html http://www

I was initially interested when I first saw this last year, but it turns out to be complete FUD. See http://www.revk.uk/2013/12/paraniod-ravings.html http://www.revk.uk/2013/12/paraniod-ravings.html for the take on the original disclosures from the MD of one of the UK's most technical ISPs (and believe me, he's no fan of BT's). See also http://www.ispreview.co.uk/index.php/2013/12/confusion-alleged-gchq-nsa-backdoor-bt-fttc-modems.html http://www.ispreview.co.uk/index.php/2013/12/confusion-alleg... In a nutshell, some ISPs will effectively hijack publicly routable ranges for internal use if they know that there's no way those addresses will ever be used for real public services. In this case, a UK ISP is re-using the US DoD's 30.0.0.0/8 network. Anecdotally I've heard the inverse is also true (US ISPs use UK MoD ranges).

heromat 12y ago
No matter if he's right or not: it can't hurt to set up an additional firewall. TR-069 is scary enough.
- Moral_ 12y ago
  Yeah, I packet captured what TR-069 (on my Actiontek C1000A) was sending to CenturyLink every day it included: All the Mac address associated on the network. The username/password to my router. All the names of the computers associated on the network. My WPS pin. My SSID Name. My WPA2 Password. My old WEP Password. How long each computer has been on the network. Amongst other things. It was pretty scary. Luckily I have root on the device, tr69 is no longer alive
pyre 12y ago
Another example (Rogers Internet, Canada): The first hop after my router is IP 7.11.163.13 which is owned by the DoD.