republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Drive By Pharming
Search Topic:
view: topics flat text 
Post a:

Comments on news posted 2007-02-15 08:29:17: Researchers from Symantec Corp. and Indiana University this morning warn of a new attack they've dubbed "drive by pharming," in which a malicious website can reconfigure a user's home router using JavaScript. ..

page: 1 · 2 · 3
AuthorAll Replies


inteller
Sociopaths always win.

join:2003-12-08
Tulsa, OK
50%....yeah right.

I'm glad to see IU is helping keep Symfrantic in the FUD business.


Rob
In Deo speramus, God Bless the USA
Premium
join:2001-08-25
Kendall, FL
·Comcast

said by inteller See Profile :

I'm glad to see IU is helping keep Symfrantic in the FUD business.
You don't think at least 50% of not changing their password to their router and (also) their SSID?
--
YourIP.US - It's Your IP .. and more!
rr.cx - Personal Site.. coming soon.


Dennis
Premium,Mod
join:2001-01-26
Algonquin, IL
Evil code?

omg, did anyone read the pdf and see the graphic on page 4?

»www.symantec.com/avcenter/refere···ming.pdf


skelet0r
Premium
join:2004-04-26
Florence, AL
Malicious websites are the devil.


cableties
Premium
join:2005-01-27
·Verizon FIOS

reply to Rob
Re: 50%....yeah right.

50%? I say higher.

Login name: Admin, smcadmin or Root
Password: admin, password, or none
SSID: linksys, netgear, or model#

How many home user's I've had to upgrade and discover that their router (if they have one) is default with SSID broadcast (older than 2 years without firmware upgrade this isn't a feature to turn off) on. They wonder why their connection is slow in the afternoon, evenings and weekends.

FUD, maybe, but I've seen it. And fixed it. I just feel bad when I have to printout out all the settings and...well... you guessed it! They lose the printout!

(for those with FIOS, we are lucky the tech shouldn't leave until you setup the pass. And change username too!)

shadow520

join:2002-04-03
Warren, MI

Open Routers

Anyone using a default router password isn't looking at this or Symantec's site.

This time of year, I have my laptop in many different people's homes in many neigborhoods in my area. I can almost always find an unsecured router somewhere. I might not get strong enough signal to connect, but I can almost always find one.
--
Common sense is not all that common.


exocet_cm
In memory of dadkins
Premium
join:2003-03-23
New Orleans, LA
clubs:
reply to skelet0r
Re: Evil code?

YES! On page 4, 6, and some others. Evil code is now represented by a devil.

Tikker_LoS

join:2004-04-29
Regina, SK
·SaskTel Saskatchewan

reply to cableties
Re: 50%....yeah right.

said by cableties See Profile :

How many home user's I've had to upgrade and discover that their router (if they have one) is default with SSID broadcast (older than 2 years without firmware upgrade this isn't a feature to turn off) on.
ssid is pretty meaningless in the scope of things

it's when they don't change default passwd, or turn on encryption that it gets fun

bigjimc

join:2003-04-21
Middleboro, MA

reply to shadow520
Re: Open Routers

I just left my parents Condo in Florida and there was 6 open SSID broadcast connections available to me.

Not to mention Lisa's Printer and Pat's Printer and.....

Maybe we as the intelligent IT community should assist more people in WiFi security and not just relish in the fact that there are that many open connections.

Maybe we should tell people that they should read the directions and follow the steps to a secure WiFi. It takes only 15 additional minutes.


Maxo
Your tax dollars at work.
Premium,VIP
join:2002-11-04
Tallahassee, FL
clubs:

reply to Dennis
Re: Evil code?

Scary


TKJunkMail
Enjoy the sun
Premium
join:2002-03-03
Avalon, NJ
·Sprint Mobile Broa..
·Comcast

 reply to cableties
Re: 50%....yeah right.

Router vendors could solve this by making changing user and password part of the setup mandatory. Just drive the noob user thru some menus forcing them to change the info on 1st startup. Having encryption on by default should also be standard.
--
--
My BLOG
My Web Page

weedahoe

join:2003-09-14
Duluth, GA
In my house..........

we use a Linksys and not only is the SSID changed but has been disabled from broadcasting, we use WPA2 with 128bit, MAC filtration and limit DHCP addresses to only 5 since I have one desktop, 2 laptops and 2 Xbox's. Good luck getting close to it.

wtansill
Ncc1701

join:2000-10-10
Falls Church, VA

reply to bigjimc
Re: Open Routers

said by bigjimc See Profile :

I just left my parents Condo in Florida and there was 6 open SSID broadcast connections available to me.

Not to mention Lisa's Printer and Pat's Printer and.....

Maybe we as the intelligent IT community should assist more people in WiFi security and not just relish in the fact that there are that many open connections.

Maybe we should tell people that they should read the directions and follow the steps to a secure WiFi. It takes only 15 additional minutes.
OK. Please tell me though -- how do you go about identifying "Lisa's Printer" such that you can tie it back to a given individual? How about all the other open links? I'm being serious -- not busting your chops.
--
That which does not kill me merely prolongs the agony.


morbo
Complete Your Transaction

join:2002-01-22
00000
clubs:
reply to weedahoe
Re: In my house..........

challenge accepted! your address please.


cableties
Premium
join:2005-01-27
·Verizon FIOS

reply to TKJunkMail
Re: 50%....yeah right.

Actually, the new models force the user to FIRST install from the CD and walk them through, step-by-step.

However, I am sure most home users have no idea about WEP/WPA, security, NAT, and they sure are ignorant about passwords.

"Do I have to use 8 letters and numbers? What does WEP mean? Key? What is a MAC address?..."--true comments by new users

Derfel

join:2004-06-06
Winnipeg, MB
·MTS

Two routers

I have two wireless routers running from my condo. One is default through and through (I think the ID is linksys?) and it has no password. It's also not connected to any internet or computer or anything. The other is a WPA-passworded router with a new ID and such. I figure anyone who happens to war-drive by will spend their time on the former, and hopefully ignore the latter.


Pirate515
Premium
join:2001-01-22
Brooklyn, NY


1 edit
reply to wtansill
Re: Open Routers

said by wtansill See Profile :

Please tell me though - how do you go about identifying "Lisa's Printer" such that you can tie it back to a given individual? How about all the other open links? I'm being serious - not busting your chops.
Well, there are printers out there with wireless capabilities, and as soon as someone who has purchased one, unpacked it and turned it on for the first time, he/she was probably presented with a prompt to give it a name so that it can be identified to other wireless clients. Of course, "Lisa" or "Pat" probably never bothered to go beyond setting their names, never went into Security Settings and made sure that their printers only talk to their wireless routers and nothing else or at least asked for a user ID/password before accepting a print job. As a result, anyone who can connect is free to print pr0n to their printers.
--

Ask me no questions, and I'll tell you no lies...
A MESSAGE to the RIAA and the MPAA: You shouldn't wound what you can't kill...


Trinijoy
Premium
join:2005-09-12
Brick, NJ
Yes

Well 50% of users ACTUALLY READ the manuals, that wouldn't happen. I feel no sympathy. It's a wrong thing to do, but not anyones fault but the users if you didn't secure your network, or take time to educate yourself about it.

bigjimc

join:2003-04-21
Middleboro, MA

reply to wtansill
Re: Open Routers

Lisa and Pat happen to be married and that was an easy one to ID in the Condo Association Listing. Then there were the Smiths, Jones Network, etc... (names changed to protect the ignorant) LOL. Plus they generally have to be withing 324 feet of the location. That limits it to about 60 condo units.

I would post on the bulletin boards for those who didn't know better that I would be available to set up secure WiFi for $50. Make some scratch.

bigjimc

join:2003-04-21
Middleboro, MA
reply to morbo
Re: In my house..........

That's funny.

I do the same thing. It bites when a friend comes over with a lap top and can't connect until I go to one of the MAC accepted computers and authorize their MAC in the list.

But it is worth it.
Forums » Drive By Pharmingpage: 1 · 2 · 3


Friday, 27-Nov 19:12:44 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF