News for hackers. Stuff that matters.

A comment on SharknAT&To: Vulnerabilities in AT&T U-verse modems. Parent comment

Re:SharknAT&To: Vulnerabilities in AT&T U-verse modems by milankragujevic on Sunday September 03, 2017 @06:16PM (#15164266)
Can you explain what is Uverse and how does it work?
[ Parent | on HN ]
Re:SharknAT&To: Vulnerabilities in AT&T U-verse modems by ryanmarsh on Sunday September 03, 2017 @08:00PM (#15164686)
Uverse is a residential DSL service offered by AT&T in the US.
[ Parent | on HN ]
Re:SharknAT&To: Vulnerabilities in AT&T U-verse modems by milankragujevic on Sunday September 03, 2017 @08:10PM (#15164724)
But why would you need a custom modem for it to work? Can't you use a different modem and just get them to give you xDSL credentials? Login and password, enter VPI/VCI and plug it into the telephone line..? What is the "802.1X auth"?
[ Parent | on HN ]
Re:SharknAT&To: Vulnerabilities in AT&T U-verse modems by jlgaddis on Sunday September 03, 2017 @09:10PM (#15164939)
No, you can't. It doesn't use a username/password for authentication, it uses a protocol known as 802.1X, which uses certificates (and the associated private key) that's stored on the device.

https://en.wikipedia.org/wiki/IEEE_802.1X

[ Parent | on HN ]
Re:SharknAT&To: Vulnerabilities in AT&T U-verse modems by burnte on Monday September 04, 2017 @02:36AM (#15166184)
It's also their residential gigabit fiber service, which is bad news for me. The service is great, the Arris gateway device isn't...
[ Parent | on HN ]