News for hackers. Stuff that matters.

A comment on BTAgent – CPE backdoor. Parent comment

Re:BTAgent – CPE backdoor by heromat on Saturday November 01, 2014 @08:51AM (#8542869)
No matter if he's right or not: it can't hurt to set up an additional firewall. TR-069 is scary enough.
[ Parent | on HN ]
Re:BTAgent – CPE backdoor by Moral_ on Saturday November 01, 2014 @12:00PM (#8543481)
Yeah, I packet captured what TR-069 (on my Actiontek C1000A) was sending to CenturyLink every day it included:

All the Mac address associated on the network.

The username/password to my router.

All the names of the computers associated on the network.

My WPS pin.

My SSID Name.

My WPA2 Password.

My old WEP Password.

How long each computer has been on the network.

Amongst other things.

It was pretty scary. Luckily I have root on the device, tr69 is no longer alive

[ Parent | on HN ]