News for hackers. Stuff that matters.

A comment on Hackers say Friday's massive DDoS attacks were just a dry run. Parent comment

Re:Hackers say Friday's massive DDoS attacks were just a dry... by throwaway13337 on Sunday October 23, 2016 @12:10AM (#12771904)
Most modem/routers that ISPs give you come with a password that is defaulted to something random - different for every device - and a sticker with that password somewhere on the physical device.

That seems like the best solution. Now we just need to enforce that as a standard with internet connected devices.

[ Parent | on HN ]
Re:Hackers say Friday's massive DDoS attacks were just a dry... by Thlom on Sunday October 23, 2016 @08:28AM (#12773259)
Haha, yes. Except when the password isn't random. The biggest ISP in Norway delivered multimodems with seemingly random SSID and password. That worked fine, until someone figured out that the password were derived from the SSID with an algorithm (Or something along those tracks, I can't remember the specifics). Now we had thousands upon thousands of basically free wifi hotspots!
[ Parent | on HN ]
Re:Hackers say Friday's massive DDoS attacks were just a dry... by jessaustin on Sunday October 23, 2016 @11:17AM (#12773887)
Maybe that was the intention? Not of management, obviously, but perhaps of someone who actually set things up...
[ Parent | on HN ]
Re:Hackers say Friday's massive DDoS attacks were just a dry... by Crosseye_Jack on Sunday October 23, 2016 @01:26AM (#12772108)
After a period of time of coming out of the box and set to open, followed by predictable passwords, followed by a lack of rate limiting on WPS and vulnerable TR-06 setups and the always present mistakes in router firmware allowing remote exploits.

Now if only we could get a standard router manufactures to stick to :-P

Sadly I can see IoT having to go though the same slow learning curve.

[ Parent | on HN ]