News for hackers. Stuff that matters.

A comment on Linksys CherryBlossom Advisory. Parent comment

Re:Linksys CherryBlossom Advisory by smoyer on Thursday June 22, 2017 @10:16PM (#14616730)
You can disable management via the WAN port and/or wi-fi if you put OpenWRT on them.
[ Parent | on HN ]
Re:Linksys CherryBlossom Advisory by Jaruzel on Friday June 23, 2017 @01:51AM (#14617260)
There should have never been management access enabled by default via WAN or WLAN on ANY router to be honest. In a misguided effort to make their consumer devices more 'friendly'[1] they've just made them more insecure.

--

[1] Even though most users have no idea the management interface even exists.

[ Parent | on HN ]
Re:Linksys CherryBlossom Advisory by pbhjpbhj on Friday June 23, 2017 @09:57AM (#14619169)
It's a tough call. The comms companies who provide my router provide millions of them. They want ACS/TR-069 by default and use it for automated updates.

I always disable it, but I'll bet I'm something like 1:10k in that respect.

[ Parent | on HN ]
Re:Linksys CherryBlossom Advisory by yjftsjthsd-h on Friday June 23, 2017 @07:40AM (#14618439)
I don't mind it being on WiFi. But yeah, public facing management port is insane.
[ Parent | on HN ]