Lizard Stresser Runs on Hacked Home Routers

Re:Lizard Stresser Runs on Hacked Home Routers by penguat on Friday January 09, 2015 @11:58AM (#8863046)

As an aside on the username/password thing, unless it's going to be visible through your window, you're probably best off keeping them on a sticky label attached to your router. That way, you have them when you need them, they're not available on the internet.

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by a3n on Friday January 09, 2015 @01:31PM (#8863552)

Put the sticker on the bottom.

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by at-fates-hands on Friday January 09, 2015 @01:41PM (#8863600)

This actually how Quest does it. Imagine my surprise when I was setting up the router and had to call and ask what the router password was and the tech said, "Yeah, just flip it over, under the serial number is a long hexadecimal code, that's your password."

At least the password was somewhat strong. I'm not sure having it printed on the same label as the serial number is a good idea though.

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by Forbo on Friday January 09, 2015 @02:20PM (#8863860)

I don't understand the problem with having it on the same label as the serial number. Can you elaborate?

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by rz2k on Friday January 09, 2015 @05:07PM (#8864810)

To me it implies that the default password can be determined if you are able to discover the MAC address. Either the manufacturer might have it in a database that could be compromised, or the algorithms generating the MAC addresses and the pseudorandom default passwords might be reverse engineered.

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by gamed on Friday January 09, 2015 @05:23PM (#8864881)

This is often the case with WPS on home routers. Here's a blog post detailing the reversing of D-Links WPS PIN generation.

http://www.devttys0.com/2014/10/reversing-d-links-wps-pin-al...

[ Parent | on HN ]

Re:Lizard Stresser Runs on Hacked Home Routers by ploxiln on Friday January 09, 2015 @01:22PM (#8863484)

Well, now there's cheap home security cameras which some significant percentage of people neglect to change the default passwords on, and webcams built into almost every device, some of which could be hacked...

I'd still generally agree with your suggestion, it's just funny to see how some of our assumptions no longer hold, over time.

[ Parent | on HN ]