News for hackers. Stuff that matters.

A comment on Cable Haunt: A critical vulnerability found in cable modems. Parent comment

Re:Cable Haunt: A critical vulnerability found in cable modems by pixl97 on Monday January 13, 2020 @07:06AM (#22033695)
You mean you're not using end to end certificate based encryption for all your applications these days?

And all the pushback we get from people here that DoH/DoT is a bad thing.

[ Parent | on HN ]
Re:Cable Haunt: A critical vulnerability found in cable modems by satanspastaroll on Monday January 13, 2020 @07:27AM (#22033828)
Not all applications are, and there are specific automated downgrade attacks for encrypted comms that force some back to plaintext. Giving outsiders access to your internal network is rarely a good idea.
[ Parent | on HN ]
Re:Cable Haunt: A critical vulnerability found in cable modems by iso1631 on Monday January 13, 2020 @07:23AM (#22033800)
You're implying we shouldn't bother with firewalls
[ Parent | on HN ]
Re:Cable Haunt: A critical vulnerability found in cable modems by MaxBarraclough on Monday January 13, 2020 @02:55PM (#22037958)
It's not my applications, but applications that auto-update over unencrypted HTTP. Also, IoT devices with software built by the lowest bidder.
[ Parent | on HN ]
Re:Cable Haunt: A critical vulnerability found in cable modems by big_chungus on Monday January 13, 2020 @07:33AM (#22033857)
Many or most devices don't support this and the average consumer isn't capable of doing it himself.
[ Parent | on HN ]