The GRC Public Test is up

Author

All Replies

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
kudos:1

Reviews:

·WOW Internet and..

·Comcast

reply to Cabal

It's on the regular ShieldsUp! link here: »www.grc.com/default.htm

I'm SUPER GLAD to see Steve is seeing the inability to directly link is really clumsy so look for that to change soon.

There's bad assumptions about what it does and right now the button is named named "GRC's Instant uPnP Exposure Test". It's looking for the specific bad case when an internet connection responds to the uPnP query like a router would on the LAN. It does NOT detect if uPnP is on and working normally on the LAN, as it should only be. Exposure of this to the world (the WAN side) was never intended and represents a total botching of uPnP implemented on a device.

Anyone see a positive scan? It should reveal the uPnP details of the device that responds.

Last... Steve continues to tweak as we speak. So don't be surprised if it burps.

to forum · permalink · 2013-01-31 23:43:54 ·

Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Kelowna, BC
kudos:2

No probs on the scan, it's locked down.

edit-bad link.

to forum · permalink · 2013-01-31 23:52:10 ·

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
kudos:1

Reviews:

·WOW Internet and..

·Comcast

Um... not really. It's a time-sensitive link for your instance. See the jibberish on the end? A different jibberish is sent to everyone. This is what I'm hoping Steve will abolish for good.

EDIT: Ah! I see you removed it. I hope we'll have better links soon.

to forum · permalink · 2013-02-01 00:01:34 ·

Wily_One
Premium
join:2002-11-24
San Jose, CA

1 edit

reply to Bill_MI

said by Bill_MI:

It's on the regular ShieldsUp! link here: »www.grc.com/default.htm

Thanks for that. That scan worked, no problem. And it works without requiring Java (itself known for being vulnerability-infested) so that's a big +1.

to forum · permalink · 2013-02-01 01:16:00 ·

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
kudos:1

Great! Notice there's more than one place to munge the IP.

to forum · permalink · 2013-02-01 01:40:41 ·

Wily_One
Premium
join:2002-11-24
San Jose, CA

LOL - thanks.

to forum · permalink · 2013-02-01 03:12:31 ·

TamaraB
Question The Current Paradigm
Premium
join:2000-11-08
Da Bronx

Reviews:

·Optimum Online

·Clearwire Wireless

reply to Bill_MI

said by Bill_MI:

I
Anyone see a positive scan? It should reveal the uPnP details of the device that responds.

Thanks for the link, looks like Apple Time Capsules are safe.

to forum · permalink · 2013-02-02 02:13:33 ·

Libra
Premium
join:2003-08-06
USA
kudos:1

reply to Bill_MI
Thank you for posting the link to the Shields Up Upnp test. I just took the test and my IP did not respond to the UPnP probes.

Sincerely, Libra

to forum · permalink · 2013-02-04 22:10:39 ·

Broadband Tech > Security > Security > Security Flaws in Universal Plug-n-Play: Unplug, Don't Play

The GRC Public Test is up