Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » ISP User Loses Service For Exposing Router Backdoor » Idiot Hacker
Search Topic:
Uniqs:
142
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Post a:
Post a:
Sue for weak security »
« 21-year-old college student violated ...  
AuthorAll Replies


dwhayden

join:2000-12-23
Greenwood, IN

Idiot Hacker

Many years ago I discovered a security backdoor to my ISPs remote access server where I had gained full rights over the system. I made the decision to call the ISP instead of telling everyone else how to hack it. They hooked me up with the head engineer, and we worked together to plug the hole. The ISP was very grateful for the information, and gave me a year free access.

This stupid hacker took a security vulnerability, and made it much worse by publishing the how-to with passwords. The ISP was well within its rights to terminate this idiot's service. Hopefully charges will be filed against him for hacking since it's so obvious his motivation was not to protect the ISP and its subs, but to gain recognition.

openbox9

join:2004-01-26
Alexandria, VA
·AT&T Southeast

said by dwhayden See Profile :

I made the decision to call the ISP instead of telling everyone else how to hack it.
This is generally the "socially accepted" avenue to taken by white hats and in general, better for the overall community than telling the whole world about the vulnerabilities. What this guy did is more black hat and he does deserve the consequences. Now if you had received little or no response from your ISP regarding the situation, the area becomes a little more grey, and usually you'll see the vulnerabilities published in an attempt to 'force' a response.

gworkman7

join:2005-10-18
Vail, AZ
User: Admin
Pass: 1234

Not very secure, but that was how my ISP was shipping their modems a couple of years back. They were counting on self-installers to change the password when they got the modems.

openbox9

join:2004-01-26
Alexandria, VA
·AT&T Southeast

And both you and your ISP knew about this insecurity. Same practice as almost every networking device sold. It's not the same as looking for, or discovering a "vulnerability" and then contacting the responsible party for a fix...or worse yet, posting it on the net for potential malicious activity.

snatman

join:2003-02-22
Virginia, MN
reply to gworkman7
"12345! Amazing, I got the same combination on my luggage!" /Spaceballs
Forums » ISP User Loses Service For Exposing Router BackdoorSue for weak security »
« 21-year-old college student violated ...  


Wednesday, 25-Nov 06:02:14 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [103] New AT&T Ad Campaign Hits Back At Verizon
· [85] New Bill Takes Aim At Higher Verizon ETFs
· [84] Apple Joins AT&T Verizon Snark Fest
· [40] In-Flight Internet Headed For Bumpy Landing?
· [32] Senators Want ACTA Made Public
· [30] Earthlink Suffers From Major E-mail Outage
· [30] AT&T Offers New Prepaid Wireless plans
· [28] Frontier Increases Modem Rental Fee
· [20] Despite Billions In USF Fees, U.S. Libraries Lack Bandwidth
· [16] Vivendi In Way Of Comcast's NBC Desires
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· Mysterious $800 Cash Deposit? [General Questions]
· [Rant] Damn Sermons through my speakers! [Rants, Raves, and Praise]
· What to use while demonoid is down? [Filesharing Software]
· Extjs grid combo box. [Webmasters and Developers]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]
· Getting ready to pull the trigger, still have cold feet. [VOIP Tech Chat]
· Opening a file download dialog from a JavaScript function. [Webmasters and Developers]
· "ISP owners could face jail under child porn bill" - CBC [Canadian Broadband]
· Climate Change Scandal Erupts After Email Hack. [Security]