News for hackers. Stuff that matters.

A comment on Please log in with router's password. Parent comment

Re:Please log in with router's password by kralos on Tuesday August 10, 2021 @09:55PM (#28137043)
> If they really needed access to the router remotely, it would be much saner to expose an SSH server with pubkey-only access or VPN, both with brute forcing protection, and allow tunnelling to the router UI only from the LAN side.

any chance you can explain that to my mum?

[ Parent | on HN ]
Re:Please log in with router's password by yipbub on Tuesday August 10, 2021 @10:11PM (#28137142)
> it would be much saner to expose an SSH server with pubkey-only access or VPN

It would be safer to leave open to the public only a secure protocol based on strong cryptographic keys instead of a password. Or you have to be signed in to a VPN to see the page.

> brute forcing protection

Try too many passwords? Try again in 1 minute. Again? 30 minutes

> allow tunnelling to the router UI only from the LAN side

I think this one means don't expose it to the internet at all. Just from your local network. >

[ Parent | on HN ]
Re:Please log in with router's password by msh on Wednesday August 11, 2021 @01:33AM (#28138381)
Your mom probably don’t need wan access to her router.
[ Parent | on HN ]