FBI tells router users to reboot now to kill malware infecting 500k devices

Re:FBI tells router users to reboot now to kill malware infe... by all_blue_chucks on Saturday May 26, 2018 @06:19PM (#17164540)

Mistakes are inevitable. Deciding to ship without any upgrade capability is a choice. A deliberate, negligent choice.

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by WalterBright on Saturday May 26, 2018 @06:35PM (#17164589)

On the other hand, remote upgradability is how malware gets itself installed in the first place.

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by all_blue_chucks on Saturday May 26, 2018 @07:11PM (#17164669)

Most HTTP libraries verify certificates by default. That's all you really need to do...

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by WalterBright on Saturday May 26, 2018 @09:14PM (#17165000)

Doesn't look like that stopped the router malware from installing itself.

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by all_blue_chucks on Saturday May 26, 2018 @11:11PM (#17165273)

Citation that they have an auto-update that verifies certificates?

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by WalterBright on Saturday May 26, 2018 @11:47PM (#17165352)

I have no idea. But obviously that simple solution is not so simple:

1. it is not trivial to produce

2. there could be vulnerabilities in the crypto implementation (like that never happens!)

3. there could be buffer overflow attacks that let the malware bypass the crypto

4. The server itself could be compromised into sending a correct certificate encoded malware

5. How are you going to audit all that?

A physical switch, on the other hand, is much easier to audit, and an attacker would need physical control of device to compromise it.

[ Parent | on HN ]