Some of Our Sources
- BoingBoing
- Smashing Apps
- Creative Curio
- Fuel Your Creativity
- Inspiredology
- Noupe
- Fudge Graphics
- Reencoded
- CSS Globe
- Android Dissected
Help Webnuz
Referal links:
August 23, 2016 02:00 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/NXqlos3S3Gw/bhus-tiger-will-power-wi-fi-router-may-be-the-most-insecure-router-ever-made
BHU's 'Tiger Will Power' Wi-Fi Router May Be The Most Insecure Router Ever Made
An anonymous reader writes from a report via Softpedia: A Wi-Fi router manufactured and sold only in China can easily run for the title of "most insecure router ever made." The BHU router, whose name translates to "Tiger Will Power," has a long list of security problems that include: four authentication bypass flaws (one of which is just hilarious); a built-in backdoor root account that gets created on every boot-up sequence; the fact that it opens the SSH port for external connections after every boot (somebody has to use that root backdoor account right?); a built-in proxy server that re-routes all traffic; an ad injection system that adds adverts to all the sites you visit; and a backup JS file embedded in the router firmware if the ad script fails to load from its server. For techies, there's a long technical write-up, which gets funnier and scarier at the same time as you read through it. "An attacker authenticating on the router can use a hardcoded session ID (SID) value of 700000000000000 to gain admin privileges," reports Softpedia. "If he misspells the SID and drops a zero, that's no problem. The BHU router will accept any value and still grant the user admin rights."Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/NXqlos3S3Gw/bhus-tiger-will-power-wi-fi-router-may-be-the-most-insecure-router-ever-made
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot