News for hackers. Stuff that matters.

A comment on Ubiquity hardware sends telemetry and it cannot be turned off. Parent comment

Re:Ubiquity hardware sends telemetry and it cannot be turned... by basch on Monday November 11, 2019 @02:27PM (#21507986)
If you click the wrong link while youre on the lan side.

Of all the devices in a house, a router should be the most important to keep up to date.

[ Parent | on HN ]
Re:Ubiquity hardware sends telemetry and it cannot be turned... by BubRoss on Monday November 11, 2019 @03:42PM (#21508672)
Pfsense and ddwrt were some of the first router software packages to fix DNS rebind attacks if that's what you are talking about.

If it is not, you will have to explain exactly the vulnerability works.

[ Parent | on HN ]
Re:Ubiquity hardware sends telemetry and it cannot be turned... by chopin on Tuesday November 12, 2019 @03:41AM (#21512564)
A link can also have an IP address as host. Many routers come with 192.168.1.1 preconfigured. With Javascript enabled you could also probe the network and craft a fitting link.

Preventing DNS rebind attacks closes only one avenue.

[ Parent | on HN ]
Re:Ubiquity hardware sends telemetry and it cannot be turned... by BubRoss on Tuesday November 12, 2019 @12:54PM (#21516240)
How would that work exactly and how would it be router insecurity?
[ Parent | on HN ]