Security → TP-LINK lost control of two domains used to configure routers...

TP-LINK lost control of two domains used to configure routers and Wi-Fi extenders

»www.computerworld.com/ar ··· ers.html

---

One way that hardware vendors try to make the configuration of a router easier is by instructing users to browse to a domain name rather than an IP address. TP-LINK routers use either tplinklogin.net or tplinkwifi.net....

According to Amitay Dan, CEO at Cybermoon, TP-LINK has lost control of the tplinklogin.net domain. Chances are, they forgot to renew it. ...

My research found another problematic domain, tplinkextender.net. As the name implies, this one is used on TP-LINK Wi-Fi extenders. A check of the WHOIS information for tplinkextender.net shows that it too, is owned by an anonymous entity and is currently for sale. ...

---

TP-Link should at LEAST release Updated Firmware to close that hole...

The First thing I did when I originally got my TP-Link TL-WDR4300 was to flash it to DD-WRT.

If the router is just going intercept the request anyways, why not use .local domain, such as tplinklogin.local or tplinkwifi.local or some other invalid TLD..
--
IPv6 Sage - ipv6.he.net/certification/scoresheet.php?pass_name=Napsterbater
www.napshome.net

I'm stupefied that someone somewhere thought that configuring something online was a brilliant idea, over an HTTP url no less.

quote:

---

Perhaps the biggest impact will be to the company's reputation. According to Dan, TP-LINK stopped communicating with him. I also checked their web site and found nothing about this issue. Hiding your head in the sand, does not make for good security.

---

quote:

---

I am also turned off by the fact that none of the tech support documents at the TP-LINK site have any dates. Why do they feel they need to hide the date when something was created, and the date when it was last reviewed or updated?

---

My major takeaways from this

Regards

But its not "online", the Router intercept the DNS and return the router LAN IP, its kept on the local LAN.
--
IPv6 Sage - ipv6.he.net/certification/scoresheet.php?pass_name=Napsterbater
www.napshome.net

Ahh, okay that was the part I was unclear on Napsterbater . Thanks for that

Still though, "http://192.168.1.1" more difficult than "http://tplinkblah.com" ... Ummm, yeaaaaaah...

Regards

Indeed, but think about the people who have zero clue that is setting these up.. :-/...
--
IPv6 Sage - ipv6.he.net/certification/scoresheet.php?pass_name=Napsterbater
www.napshome.net

...I try not to... "Been There, Done That, Achievement Unlocked -- Helping Clueless User"

Regards

.......looks at TP-Link Archer C7 sitting on shelf

Interesting.

Although, I've always used the IP address to access the router instead of a domain name on all my routers, this TP-Link included.
--
I'll be stretching out the rhyme like gravity stretches time.