Breaking into apartment buildings in five minutes on my phone

Re:Breaking into apartment buildings in five minutes on my p... by huang_chung on Monday February 24, 2025 @01:29PM (#43163022)

Interesting story but a CVE for this is a bit melodramatic and why no one takes security folk seriously (cry wolf too many times).

OpenWRT ships with no password at all (!) with full root access on default install. The situation is the same: they politely suggest you change it from the default (blank) password but do not force you to do so.

By this logic every OpenWRT install (and many other softwares) dating back many years should be subject to CVE.

[ Parent | on HN ]

Re:Breaking into apartment buildings in five minutes on my p... by NRv9tR on Monday February 24, 2025 @02:01PM (#43163431)

I assume you have to be on that network to access the login. I'm 95% sure it the UI/admin is not accessible to the internet by default... but also, yes that shit should be way better. Even Comcast and other ISPs have done better than this for a decade or more now.

[ Parent | on HN ]

Re:Breaking into apartment buildings in five minutes on my p... by huang_chung on Monday February 24, 2025 @03:44PM (#43164729)

If you believe you need to be on same network to compromise internal interface web application you are gravely mistaken.

[ Parent | on HN ]

Re:Breaking into apartment buildings in five minutes on my p... by anilakar on Monday February 24, 2025 @09:30PM (#43167403)

Yup, worth a CWE but not a CVE.

[ Parent | on HN ]