Backdoor found in Linksys, Netgear Routers

Re:Backdoor found in Linksys, Netgear Routers by ryanhuff on Thursday January 02, 2014 @04:42AM (#6998885)

Time Warner wants nothing to do with my (own purchased) cable modem beyond allowing me to use it. The vendor will only provide firmware patches to cable operators, and Time Warner won't touch my modem to help get the firmware upgraded.

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by midas007 on Thursday January 02, 2014 @06:13AM (#6999089)

I've always had naked DSL because of not wanting to pay for cable TV or another line. For DSL and similar services, BYOE tends to be hand-off.

With cable modems, does/can the provider push firmware?

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by alexwright on Thursday January 02, 2014 @11:54AM (#7000539)

All the cable modems I've used (UK) have always downloaded a an image over TFTP on boot. As I understand it they can come up with a very minimal loader and reach out for their config to the local "node" for configuration, and this can include new firmware. On the support line they're adamant that you reboot the things before proceeding past the IVR. Which makes sense.

The last I heard about it the different levels of service (bronze/silver/gold they were at the time, 5/10/20Mbit/s) are just based on the MAC the modem sends on this initial config/handshake. When I moved from 20 to 50 I was told to reboot the modem and it came up will an all new shiny more craptastic than ever web interface as well as setting it's WAN port to 50Mbit/s

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by tonyb on Thursday January 02, 2014 @11:39AM (#7000438)

With DOCSIS cable modems only the provider can update the firmware. And end user doesn't have the ability to update the firmware, even if they own the modem. That is part of the DOCSIS standard.

[ Parent | on HN ]