News for hackers. Stuff that matters.

A comment on Lizard Stresser Runs on Hacked Home Routers. Parent comment

Re:Lizard Stresser Runs on Hacked Home Routers by Alupis on Friday January 09, 2015 @01:19PM (#8863466)
ISP's that want to remotely manage their CPE, ie. reboot remotely, adjust routes, etc.

Obviously these should be locked to only respond to designated control IP's that originate from the ISP, and default user/passwords should be changed...far too often I've seen corps use a non-default user/pass but instead switched to something different... but only that every single device they deploy has the same exact user/pass on it.

[ Parent | on HN ]
Re:Lizard Stresser Runs on Hacked Home Routers by segacontroller on Friday January 09, 2015 @03:03PM (#8864171)
I have seen smaller ISPs use something similar to admin/c0mcast on every single device while using equipment too cheap to include an access list for remote management.
[ Parent | on HN ]