Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads



 
Forums » US Telco Support » Verizon » Verizon Fiber Optics » [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!
Uniqs:
3350
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
[northeast] Verizon Name Server Port Scan? »
« [net] Extremely slow uploads past 2 days  
BillF72

join:2009-03-05

[ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

Followup to an older thread ..
»Verizon FiOS default WEP key HIGHLY insecure!

Anyone can get the default WEP key for a FiOS supplied Actiontec router.

No cracking tools or network sniffer required.
You just need a calculator !!

The SSID name itself is a base-36 encoded version of the router's wired-side MAC address, and this gives away the default WEP key.

See the articles:
»xkyle.com/2009/03/03/verizon-fio···culator/
http: //xkyle.com/2009/03/03/verizon-fios-wireless-key-calculator/
or
»gigamike.wordpress.com/2008/05/0···lations/
http: //gigamike.wordpress.com/2008/05/06/verizons-false-sense-of-security-with-fios-installations/

Yes, definitely step up to WPA or WPA2 security (whichever your Actiontec router revision supports). Or at the least, change your WEP key to use something other than the default !!!

FiOS LIVE
So fast, it's LIVE

join:2008-11-25
Collegeville, PA

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

Free WiFi anyone? That's basically what it is since the WEP key is given away in the router's MAC address that is being broadcasted. You could almost look at it as a secret perk for FiOS customers to get free WiFi from other FiOS users.

JoshA

@anonymouse.org

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

Not just a perk for other FiOS customers... for anyone.

Beware of anyone parked outside your house... as they may be using your WiFi.
»Stealing Wi-Fi Access...

I suspect most WiFi stealers are just interested in some free convenient Internet access, but they could also be doing illegal activities on your FiOS connection, or their laptops could have viruses which are attempting to infect your computers (which is easier since they are inside your firewall now).

BBR_InsUW
AA or NF thats my Game
Premium,Mod
join:2000-04-22
La Mesa, CA
clubs:

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

As a discussion of an insecurity in the router this is an acceptable topic, but please lets not get into the exact how to of this.

troyh72
Premium
join:2003-12-12
Keller, TX

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

If you are going to use WPA, use WPA AES. WPA TKIP is also crackable.

»arstechnica.com/security/news/20···cked.ars

danclan

join:2005-11-01
Midlothian, VA
·Verizon FIOS

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

said by troyh72 See Profile :

If you are going to use WPA, use WPA AES. WPA TKIP is also crackable.

»arstechnica.com/security/news/20···cked.ars
You need to read more. Its still secure and the odds of anyone hanging around your home to steal your wifi are still extremely slim...
VZFiOSYo

join:2007-02-24
Lakewood, CA
Only works on Actiontec Routers. Not the Westell 9100EM

JoshA

@b0b3r.pl

Here is a link to the ActionTec MI424WR user manual....
»www.actiontec.com/support_cms/do···v1.1.pdf

See page 32 & 35 for the WPA security options.
Choose WPA, Pre-Shared Key, AES algorithm, and create a good key (one that is not a simple dictionary word, or anything related to your name, birthdate, address, pets, car, etc)

The user manual is not a great 'how-to' guide on best security practices.

Has anyone seen a better guide for walking the average user through logging into the router and changing these security options to WPA (or WPA2 on later revisions)?

deblin
Dark Side of the Moon
Premium,MVM
join:2001-09-01
Middletown, DE

It's been mentioned numerous times on here, but at least they set it up with a WEP key instead of leaving it wide open. It will at least keep your non-technical neighbors from stealing (unintentionally or not) your inet.
--
He who is not contented with what he has, would not be contented with what he would like to have. -Socrates

ironwalker
World Renowned
Premium,MVM
join:2001-08-31
Keansburg, NJ
clubs:
Hmm, isn't any WEP unsecure? what makes fios WEP any differnet is it because the router is in modem?

FiOS LIVE
So fast, it's LIVE

join:2008-11-25
Collegeville, PA

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

There is no modem with FiOS and you can use your own router over CAT5 if you wish.

The problem with the Verizon routers is that the key used for their default WEP is being broadcasted to everyone. Customers are not told this so they are led to believe their wireless is secure and they don't have to change a thing.

What's the use of having a password when you give it away to everyone and anyone?
--
AT&T + Comcast
Your world. Destroyed.
Throttle and put a cap on it. It's Comcastic!

JBurns

@foebud.org

Found on some obscure FiOS page by searching Google.

»onlinehelp.verizon.net/consumer/···ity2.pdf

"
Security is an important issue when using a wireless home network. Because radio waves are used to transfer information between your networked computers, it's possible for hackers to intercept this information. Taking advantage of the security features built into your Actiontec router can make it more difficult for hackers to access your personal information.
Your Actiontec M1424WR router comes with an assigned ESSID and WEP encryption key to make installation easier and provide immediate protection for your home network. Review the type of data stored on your network computers to determine the level of protection you need. Regardless of the level of security protection you choose, it's very important to periodically change your security settings. It should be considered a normal maintenance task.
"
So, VZ recommends us to periodically change the security settings, but doesn't make this recommendation (nor the instructions) easily available.
VZFiOSYo

join:2007-02-24
Lakewood, CA

Re: [ fiber tech] Verizon FiOS default WEP key HIGHLY insecure!

They are easily available. Did the tech that did the install leave the pamphlet that came with the router? There should be a CD thats also included which has a manual. Its explained in there.

ironwalker
World Renowned
Premium,MVM
join:2001-08-31
Keansburg, NJ
clubs:
Thank you FiOS LIVE See Profile
Forums » US Telco Support » Verizon » Verizon Fiber Optics[northeast] Verizon Name Server Port Scan? »
« [net] Extremely slow uploads past 2 days  


Saturday, 05-Dec 21:02:01 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [163] Comcast Releasing Promised Usage Meter
· [147] Avast Antivirus Has Gone Mad
· [128] Comcast Makes NBC Universal Acquisition Official
· [115] The Bandwidth Hog Does Not Exist
· [105] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [101] Google Invades ISP, OpenDNS Turf With Google Public DNS
· [85] FCC Ponders Moving From PSTN To IP Voice
· [81] Latest Consumer Reports Survey Not Kind To AT&T
· [80] New Bill Aims To Limit ETFs
· [74] Sprint Defuses GPS Privacy Media Bomb
Most people now reading
· False positive in Avast! or is it real? [Security]
· Wife might have to work in.... Iowa for a few months!!! [General Questions]
· Windows 7 boot manager editing questions [Microsoft Help]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· UPS - What do you people think happened? [General Questions]
· DNS options, what are YOU using? [TekSavvy]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· First commercial tool to crack BitLocker arrives (Updated) [Security]
· Many Sites Unreachable [Rogers]