dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
59
MrFixit1
join:1999-11-26
Madison, WI

MrFixit1 to TamaraB

Member

to TamaraB

Re: Security Flaws in Universal Plug-n-Play: Unplug, Don't Play

You can use »netalyzr.icsi.berkeley.edu/ to at least test for UPNP access from the wan side .
Will be near the top of the results listing ,may have to hit + to get full details .

TamaraB
Question The Current Paradigm
Premium Member
join:2000-11-08
Da Bronx
·Verizon FiOS
Ubiquiti NSM5
Synology RT2600ac
Apple AirPort Extreme (2013)

1 recommendation

TamaraB

Premium Member

said by MrFixit1:

You can use »netalyzr.icsi.berkeley.edu/ to at least test for UPNP access from the wan side .
Will be near the top of the results listing ,may have to hit + to get full details .

Thanks. That's the first reasonable tool I've seen to test for this UPnP flaw. Now, I have to temporarily enable Java to use it Java, that other full of holes disaster area

Cartel
Intel inside Your sensitive data outside
Premium Member
join:2006-09-13
Chilliwack, BC

Cartel to MrFixit1

Premium Member

to MrFixit1
Click for full size
said by MrFixit1:

You can use »netalyzr.icsi.berkeley.edu/ to at least test for UPNP access from the wan side .
Will be near the top of the results listing ,may have to hit + to get full details .

You won't need to worry about upnp if you install JAVA!!

Berkeley have their head up their ass?
MrFixit1
join:1999-11-26
Madison, WI

MrFixit1

Member

Do not disagree with you Sindows ,the nice thing about Firefox is how easy it is to turn Java on and off . Since I normally run the test with only one instance of FF running , and then turn Java back off , not too worried about it.

Mangix
join:2012-02-16
united state

Mangix to Cartel

Member

to Cartel
Try doing the types of test that Netalyzr does without Java. I dare you. I double dare you.

At the end of the day, Java requires less investment of resources to get one thing to run in multiple places(browsers, OSes, etc...).

Plus, Java will only mess you up if you allow it to run on other sites. The choice is yours.