News for hackers. Stuff that matters.

A comment on Walmart router, others on Amazon, eBay have hidden backdoors to control devices. Parent comment

Re:Walmart router, others on Amazon, eBay have hidden backdo... by daniellarusso on Monday November 23, 2020 @10:52PM (#25195109)
Well, it is also possible to not use port 53 as UDP to resolve DNS.

So, if it is using HTTPS for DNS resolution, I don’t know how you would block that.

If you could install a self-signed cert onto the device, you could MitM the HTTPS traffic and see what it is doing.

[ Parent | on HN ]
Re:Walmart router, others on Amazon, eBay have hidden backdo... by Reelin on Tuesday November 24, 2020 @04:42AM (#25196861)
> if it is using HTTPS for DNS resolution, I don’t know how you would block that

By filtering traffic sent from that particular device based on a query to your DNS filter to approve or deny the destination address. (Some implementation work probably required.)

[ Parent | on HN ]