Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » New Botnet Targets Routers, Dumb People
Search Topic:
view: topics flat text 
Post a:

Comments on news posted 2009-03-24 13:20:06: A new bit of nasty code named "psyb0t," is getting a lot of attention today for being the first botnet malware designed for Linux-embedded broadband equipment and routers. ..

page: 1 · 2 · 3 · 4 · 5
AuthorAll Replies


S_engineer

join:2007-05-16
Chicago, IL
Nothing is sacred...

Why don't people change the defaults....I guess alpha-numeric is too big of a concept to grasp!


Eat Me

join:2002-09-25
Sussex, NJ
It's our plug and play culture. People just want to plug in things and have them work.

Security? What's that?


dcurrey
Premium
join:2004-06-29
reply to S_engineer
I am in range of 3 wireless networks. 2 of them are close enough to connect to. Even logged into routers. Guess I should change the default password for them at least.


ztmike
Mark for moderation
Premium
join:2001-08-02
Michigan City, IN

1 edit
default

Okay..yes this a is a n00b question..but how do you change the default password on a wrt54g? I been meaning to do it but haven't bothered to look up how..
--
»www.ps3grid.net


pnh102
Reptiles Are Cuddly And Pretty
Premium
join:2002-05-02
Mount Airy, MD
·Comcast

reply to S_engineer
Re: Nothing is sacred...

said by S_engineer See Profile :

Why don't people change the defaults....I guess alpha-numeric is too big of a concept to grasp!
Probably because there's no real incentive to do so. ISPs won't disconnect users who do not take security seriously.

However, most off-the-shelf routers have these ports plugged by default. The same usually goes for remote access to the router. In most cases, someone would have to go out of their way to open these ports or enable remote web access to a router.
--
Blagojevich / Madoff 2012!


aefstoggaflm
Open Source Fan
Premium
join:2002-03-04
Bethlehem, PA
·Verizon Online DSL

 reply to dcurrey
said by dcurrey See Profile :

I am in range of 3 wireless networks. 2 of them are close enough to connect to. Even logged into routers. Guess I should change the default password for them at least.
I would not do that, if I were you.

Because connecting to another network that you do not own is illegal.
--
Please use the "yellow (IM) envelope" to contact me and please leave the URL intact.


SSX4life
Premium
join:2004-02-13
·RoadRunner Cable

reply to pnh102
um..... i've got DDWRT v. 24 but no defaults and a fairly heavy password.

should I disable SSH even though I use it from time to time? =/
--
»www.google.com is your best friend... please use it before asking your question.


aefstoggaflm
Open Source Fan
Premium
join:2002-03-04
Bethlehem, PA
·Verizon Online DSL

reply to ztmike
Re: default

said by ztmike See Profile :

Okay..yes this a is a n00b question..but how do you change the default password on a wrt54g? I been meaning to do it but haven't bothered to look up how..
After you log in to the router, go to Administration -> Management

The screen will look something like this

»ui.linksys.com/files/WRT54G/v1-v···ment.htm

Enter in the new password two times (Router Password and Re-enter to confirm).

Click save.
--
Please use the "yellow (IM) envelope" to contact me and please leave the URL intact.


SSX4life
Premium
join:2004-02-13

1 edit
FYI, DDWRT has both of these turned on by default.



Don't need em, disable em.


pnh102
Reptiles Are Cuddly And Pretty
Premium
join:2002-05-02
Mount Airy, MD
·Comcast

reply to SSX4life
Re: Nothing is sacred...

said by SSX4life See Profile :

should I disable SSH even though I use it from time to time? =/
Personally I use a VPN to get into my home network. I used to have SSH open when I had a linux box on the other end but I disabled root logins and had a pretty strong password for the other accounts. I never had a problem.
--
Blagojevich / Madoff 2012!


ztmike
Mark for moderation
Premium
join:2001-08-02
Michigan City, IN
·Comcast

reply to aefstoggaflm
Re: default

said by aefstoggaflm See Profile :

said by ztmike See Profile :

Okay..yes this a is a n00b question..but how do you change the default password on a wrt54g? I been meaning to do it but haven't bothered to look up how..
After you log in to the router, go to Administration -> Management

The screen will look something like this

»ui.linksys.com/files/WRT54G/v1-v···ment.htm

Enter in the new password two times (Router Password and Re-enter to confirm).

Click save.
Yea, I just saw that, wasn't sure if that was the right one or not. Thanks.
--
»www.ps3grid.net


Kilroy
Premium,MVM
join:2002-11-21
Ann Arbor, MI
Targeting Dumb People?

Then I guess they will have a plethora of targets. God loves dumb people, look at how many he made.
--
When will the people realize that with DRM they aren't purchasing anything?


tubbynet
reminds me of the danse russe
Premium
join:2008-01-16
Chandler, AZ
·Cox HSI
·Callcentric
·Sprint Mobile Broa..
·FrontierNet Intern..

niche market?

pardon my ignorance in this area - but how many consumer level routers actually *have* telnet/ssh options? afaik, only routers that run ddwrt/xwrt/openwrt/tomato/etc have such options available and if you are running something like that, you *should* know how to secure your router. i could see something like m0n0wall/pfsense/etc, but the same argument can be made.
am i missing something or is this just pure laziness from (quasi-)technical people?

q.
--
those who forget the past are doomed to repeat it...


Eat Me

join:2002-09-25
Sussex, NJ
·PenTeleData
·Future Nine Corpor..
·VOIPo
·Vonage

reply to pnh102
Re: Nothing is sacred...

said by pnh102 See Profile :

Probably because there's no real incentive to do so. ISPs won't disconnect users who do not take security seriously.
That's because they'd lose 3/4 of their customer base. ISPs these days cater primarily to non computer savvy people. Unfortunately we the computer savvy folks get lumped in with them too.


dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
·Comcast

reply to Kilroy
Re: Targeting Dumb People?

said by Kilroy See Profile :

Then I guess they will have a plethora of targets. God loves dumb people, look at how many he made.
ROFL! Ya think?
--
Think outside the Fox... Opera


Dave547457

@verizon.net
Dumb people?

I don't think people who don't change the defaults are necessarily dumb.

PapaMidnight

join:2009-01-13
Baltimore, MD

reply to aefstoggaflm
Re: Nothing is sacred...

said by aefstoggaflm See Profile :

said by dcurrey See Profile :

I am in range of 3 wireless networks. 2 of them are close enough to connect to. Even logged into routers. Guess I should change the default password for them at least.
I would not do that, if I were you.

Because connecting to another network that you do not own is illegal.
That's not entirely accurate.

First of all, there's no federal law as of yet of such and such cases are being handled on either a state by state or municipality by municipality case basis.

Secondly, connecting to another network you do not known is not illegal. "Maliciously" connecting to another network you do not own is illegal.

Additionally, Simply the wording alone of what you stated is too broad and makes the entire premise of the internet illegal, after all, aren't you merely "connecting to another network that you do not own"?

PapaMidnight

join:2009-01-13
Baltimore, MD


1 edit
reply to SSX4life
said by SSX4life See Profile :

um..... i've got DDWRT v. 24 but no defaults and a fairly heavy password.

should I disable SSH even though I use it from time to time? =/
Yes. I'd suggest just using a VPN and Telnet. I used to keep a PPTP server open for myself.

PapaMidnight

join:2009-01-13
Baltimore, MD

reply to Eat Me
said by Eat Me See Profile :

It's our plug and play culture. People just want to plug in things and have them work.

Security? What's that?
Heh, 5 networks in range of me at home are still carrying the SSID's:
linksys
d-link
belkin
eHome


Morac

join:2001-08-30
Riverside, NJ
·Comcast


2 edits
reply to tubbynet
Re: niche market?

Surprisingly a lot have remote telnet/ssh options. They are disabled by default, but it's very simple to just check the box next to them.

Personally I think the check box should be disabled if the password hasn't been changed or isn't deemed "good enough".

edit - Oops I confused remote web interface with remote shell. So no, most consumer devices do not have a built in remote shell.
--


The Comcast Disney Avatar has been retired.
Forums » New Botnet Targets Routers, Dumb Peoplepage: 1 · 2 · 3 · 4 · 5


Friday, 27-Nov 14:47:27 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF