Privacy Router Anonabox Gets $600K in Crowdfunding and Huge Backlash

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by nmeofthestate on Friday October 17, 2014 @06:51AM (#8470282)

Here in Scotland my broadband router has a unique wifi password, but the admin password for configuring the router is always 'sky'.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by fulafel on Friday October 17, 2014 @07:45AM (#8470419)

Outstanding. Sounds like any banner ad you happen across could own your network with a variant of <img src="hxxp://192.168.0.1/admin.cgi?op=login&password=sky">.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by kevinbowman on Friday October 17, 2014 @10:06AM (#8471016)

To protect against these kinds of attacks (and DNS rebinding attacks), most (?) modern browsers won't allow a webpage to make requests to non-routable IP addresses unless the page itself came from a non-routable IP address. Not that that's a fix, but it definitely helps mitigate the issue.

[ Parent | on HN ]

Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by fulafel on Tuesday October 21, 2014 @09:09AM (#8487102)

I just tested Firefox and Chrome, both made a HTTP request successfully to my laptop's rfc1918 address referenced from a web page on the internet. Maybe you are thinking of IE's "zones" feature?

[ Parent | on HN ]