patcat88
join:2002-04-05
Jamaica, NY
| hw assignment
Um, what exactly is taken over, I see the associating with a router part, I dont see the carrier. Is this someone's idea of a semester long project, that they conviently ignore certain real world facts in order to make this hypothetical study?
The only carrier I can think of would be exploiting a linux/firmware security hole, or interfering with TCPIP traffic and injecting something to infect a web browser or similar PC application/ |
|
TKJunkMail
Enjoy the sun
Premium
join:2002-03-03
Avalon, NJ
 ·Sprint Mobile Broa..
 ·Comcast
1 edit | said by patcat88  :Um, what exactly is taken over, I see the associating with a router part, I dont see the carrier. Is this someone's idea of a semester long project, that they conviently ignore certain real world facts in order to make this hypothetical study? The only carrier I can think of would be exploiting a linux/firmware security hole, or interfering with TCPIP traffic and injecting something to infect a web browser or similar PC application/ I read the linked PDF on this and there is no mention of how you would infect a router once you can gain access to it. Their whole paper is based on ease of access due to no or weak security. There is nothing on how malware could get on the router once access is attained. The only home WiFi routers I am familiar with(Netgear & Linksys) do not let you change code except thru an ethernet linked PC.
--
Internet News
My BLOG
My Web Page |
|
cacroll
Eventually, Prozac becomes normal
Premium
join:2002-07-25
Martinez, CA
| said by TKJunkMail :The only home WiFi routers I am familiar with(Netgear & Linksys) do not let you change code except thru an ethernet linked PC.
Every WiFi router that I've seen lets you flash firmware by connecting to the management server. Using Ethernet or Wifi is equally acceptable to the firmware update process.
I constantly and seriously advise against using WiFi for firmware updates, as it is the best way that I can think of to brick a router. But I don't think that the update process prevents you.
--
Cheers,
Chuck
MS-MVP 2005-2007 [Windows - Networking]
PChuck's Network |
|
joako
Premium
join:2000-09-07
/dev/null
 ·AT&T U-Verse
| reply to TKJunkMail
I've flashed firmware plenty of times via WiFi. What needs to be done is somewhat elaborate: create firmwares for the routers and be able to identify the router connected to and load the correct firmware. It's not impossible.... it's not even that hard just needs someone that is dedicated and applies their effort into the matter.
Also many routers use Linux so there might be a more trivial way to have the router execute some code.
--
Am Heimcomputer sitz' ich hier, und programmier' die Zukunft mir |
|
cacroll
Eventually, Prozac becomes normal
Premium
join:2002-07-25
Martinez, CA
| said by joako :I've flashed firmware plenty of times via WiFi.
I do 5 things before flashing firmware.
•Record or save all settings.
•Reset all settings to factory defaults.
•Turn the radio off (if WiFi).
•Disconnect all Ethernet connections.
•Connect one single Ethernet cable, to one single computer.
The second time I flashed my BEFSX41, I neglected to remove all Ethernet cables. That was when I had to learn, from a thread in this forum, how to unbrick a BEFSX41.
Maybe I can flash using WiFi. Maybe I can drive down the highway at 80 mph and not get nailed by the cops. Maybe not.
I don't recommend speeding to anybody. Nor will I recommend using WiFi to flash firmware.
--
Cheers,
Chuck
MS-MVP 2005-2007 [Windows - Networking]
PChuck's Network |
|
joako
Premium
join:2000-09-07
/dev/null | reply to patcat88
Totally agree.. I wouldn't try to flash a router when I have ethernet access to it... just saying its possible and most of the time it will work.
--
Am Heimcomputer sitz' ich hier, und programmier' die Zukunft mir |
|
