Privacy Router Anonabox Gets $600K in Crowdfunding and Huge Backlash

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by ferongr on Friday October 17, 2014 @06:24AM (#8470205)

Here in Europe, standalone routers are not very popular, since ISPs provide CPEs (customer premises equipment) that are a combination of a modem and router with multiple Ethernet ports and Wi-Fi. The norm is for the ISP to configure them with unique web-interface passwords, WiFi SSIDs as well as WPA keys, printed on the back of the device [1].

[1} http://imgur.com/i8W4aQb

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by nmeofthestate on Friday October 17, 2014 @06:51AM (#8470282)

Here in Scotland my broadband router has a unique wifi password, but the admin password for configuring the router is always 'sky'.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by fulafel on Friday October 17, 2014 @07:45AM (#8470419)

Outstanding. Sounds like any banner ad you happen across could own your network with a variant of <img src="hxxp://192.168.0.1/admin.cgi?op=login&password=sky">.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by kevinbowman on Friday October 17, 2014 @10:06AM (#8471016)

To protect against these kinds of attacks (and DNS rebinding attacks), most (?) modern browsers won't allow a webpage to make requests to non-routable IP addresses unless the page itself came from a non-routable IP address. Not that that's a fix, but it definitely helps mitigate the issue.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by fulafel on Tuesday October 21, 2014 @09:09AM (#8487102)

I just tested Firefox and Chrome, both made a HTTP request successfully to my laptop's rfc1918 address referenced from a web page on the internet. Maybe you are thinking of IE's "zones" feature?

[ Parent | on HN ]