News for hackers. Stuff that matters.

A comment on D-Link patch doesn’t address all bugs listed in their own security advisory. Parent comment

Re:D-Link patch doesn’t address all bugs listed in their own... by FireBeyond on Tuesday April 14, 2015 @07:11PM (#9377921)
I had that router. To be clear, when they "removed bridging" they "removed, via adding a CSS 'display:none;' block to the radio button", and the workaround was inspecting the HTML and removing the CSS.

NOT that you should have to, by any means whatsoever.

[ Parent | on HN ]
Re:D-Link patch doesn’t address all bugs listed in their own... by UnoriginalGuy on Tuesday April 14, 2015 @09:01PM (#9378313)
I used to own a D-Link DIR-655. It had a hilariously terrible bug: It had a scheduler built in, so you could set WiFi to turn off overnight, amongst other things.

The scheduler web interface would only accept a range in the same 24 hr day, if you tried to set it to e.g. start (WiFi off) at 11 pm and stop (WiFi on) at 5 am, it refused with an error (paraphrasing) "end time must be after begin time."

It was ONLY a JavaScript issue. You could trivially bypass it using a developer bar, and it worked perfectly. But they never fixed the JavaScript in all the years I owned it (and I doubt it is fixed right now today).

[ Parent | on HN ]