D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: Halibut Point Memory on July 21, 2010, 04:46:27 PM

Title: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: Halibut Point Memory on July 21, 2010, 04:46:27 PM

Finally some good news from the tech world. While we certainly have had our share of firmware SNAFU's, this is some good news.

I'd be curious, however, of the configuration they used...anotherwords, if they did or did not have SecureSpot enabled and so on.

I use a tiered combination of fail safes to protect my home network, beginning with OpenDNS, which has its own re-binding attack solution. It's nice to know that the DIR-655 is in that tier at least in theory.

Any comment by the tech support folks here on all this?

Title: Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: SirDevon on July 22, 2010, 07:09:11 PM

I think this link has the DIR-655 as being vulnerable to this hack...

http://blogs.forbes.com/firewall/2010/07/13/millions-of-home-routers-vulnerable-to-web-hack/ (http://blogs.forbes.com/firewall/2010/07/13/millions-of-home-routers-vulnerable-to-web-hack/)

unless I am reading it wrong, seems a little confusing.

Title: Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: Halibut Point Memory on July 23, 2010, 07:50:56 AM

This is the ARS Technica list from their report. The ''YES'' means the router was successfully hacked. Notice that the DIR-655 indicates ''NO.''

https://spreadsheets.google.com/pub?key=0Aupu_01ythaUdGZINXQ5Vi16X3hXb3VPYkszNXM0YXc (https://spreadsheets.google.com/pub?key=0Aupu_01ythaUdGZINXQ5Vi16X3hXb3VPYkszNXM0YXc)

I still would be interested in which configuration they had the DIR-655 when it was tested.

Title: Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: Sammydad1 on July 23, 2010, 09:31:27 AM

one place tests one version under one firmware and they say its safe ?

seems like their testing on the dir-655 is a little short on the completeness scale.....

first thing users need to do is change the default admin password...that will go pretty far in itself...

Title: Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: dagger_99 on July 24, 2010, 08:08:11 AM

Cool...so now we have a secure router that can't keep a wireless connection.

Let's rejoice at the good news...

Title: Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
Post by: Halibut Point Memory on July 25, 2010, 03:38:31 AM

Quote from: dagger_99 on July 24, 2010, 08:08:11 AM

Cool...so now we have a secure router that can't keep a wireless connection.

Let's rejoice at the good news...

Hehe...maybe that's why it's secure from these attacks.