4 ms·
Definitely need more posts/articles like that. Sometimes publicity is the most efficient way to eradicate vendor' sloppiness and ignorance.
by gesman 12y ago
Definitely need more posts/articles like that.
Sometimes publicity is the most efficient way to eradicate vendor' sloppiness and ignorance.
- finnn 12y agoThe web is full of articles like this. Vendors still come out with shitty, usually GPL-violating firmware. Links below from some quick googling and going through the archives of devttys0.com, but it doesnt even begin to describe the problem. Nearly every consumer router has some stupid injection or authentication bypass vulnerability. [0] http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/ http://www.devttys0.com/2013/10/reverse-engineering-a-d-link... [1] http://www.exploit-db.com/exploits/35917/ http://www.exploit-db.com/exploits/35917/ [2] http://arstechnica.com/security/2014/02/bizarre-attack-infects-linksys-routers-with-self-replicating-malware/ http://arstechnica.com/security/2014/02/bizarre-attack-infec... [3] https://threatpost.com/more-trouble-for-linksys-home-small-office-routers/104322 https://threatpost.com/more-trouble-for-linksys-home-small-o... [4] http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-algorithm/ http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-al... [5] http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-algorithm/ http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-al... [6] http://www.devttys0.com/2014/05/hacking-the-dsp-w215-again-again-again/ http://www.devttys0.com/2014/05/hacking-the-dsp-w215-again-a... [7] http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plug/ http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-... [8] http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overflow/ http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overfl... [9] http://www.devttys0.com/2014/02/cracking-linksys-crypto/ http://www.devttys0.com/2014/02/cracking-linksys-crypto/
- iancarroll 12y agoSome Netgear routers even have a built-in (root) telnet server and a command to dump the admin password. https://ian.sh/blog/2014/10/18/netgear-wndr4000-security/ https://ian.sh/blog/2014/10/18/netgear-wndr4000-security/