News for hackers. Stuff that matters.

Lyrebirds

I see your point, but the vast majority of people who own a modem, have no idea that a private key does not refer to the one under their doormat.

And even if the worst thing is shutting off peoples internet, I fail to see how, at this scale, it is not at least a tiny issue?

You are unfortunately right about the reputation of SOHO routers and modems. The programming required to correct this issue is rather trivial, so hopefully patches should be easy to roll out.

The unfortunate thing, is how the code has propagated from Broadcom across many vendors to even more ISPs, and how getting in touch with every affected ISP is a bit of a mess. Hence our attempt at branding, as this has a better chance of getting non-technical focus, which seems to be the way to reach many ISPs these days.

We suspect that because the bug originated in reference code, that it might have slipped past QA as it came from a trusted source.