UK becomes first country to ban default bad passwords on IoT devices

Re:UK becomes first country to ban default bad passwords on ... by mjmdavis on Tuesday April 30, 2024 @11:25AM (#40212061)

This is pretty sensible cybersecurity policy. Just don’t do what BT did on their HomeHubs and generate a brute forceable password based on a hash of the ssid and some serial numbers.

[ Parent | on HN ]

Re:UK becomes first country to ban default bad passwords on ... by rnhmjoj on Tuesday April 30, 2024 @11:44AM (#40212335)

A lot of italian ISPs did that too in the early 2010s. Eventually someone figured out the algorithm to derive the WP2 passphrase from the SSID (and MAC address, I think) and wrote a handy tool. You were literally able to drive around a neighborhood and connect to any WiFi network you wanted.

[ Parent | on HN ]

Re:UK becomes first country to ban default bad passwords on ... by shrikant on Tuesday April 30, 2024 @11:49AM (#40212405)

When I moved to the UK, I figured this out and used this for a month or so of free internet while waiting for my own internet connection to be set up.

[ Parent | on HN ]