News for hackers. Stuff that matters.

A comment on WDMyCloud Multiple Vulnerabilities. Parent comment

Re:WDMyCloud Multiple Vulnerabilities by madez on Friday January 05, 2018 @10:58PM (#16083764)
The evidence for a backdoor by the government vs a programming mistake or backdoor by somebody else is weak, I think. Also, what would change even if?
[ Parent | on HN ]
Re:WDMyCloud Multiple Vulnerabilities by saguro on Friday January 05, 2018 @11:05PM (#16083790)
From TFA:

> As you can see in the above code, the login functionality specifically

> looks for an admin user named "mydlinkBRionyg" and will accept the password

>of "abc12345cba" if found. This is a classic backdoor. Simply login with

> the credentials that I just mentioned from the above code.

Programming mistake? Seriously?

[ Parent | on HN ]