• May 16, 2025, 04:46:16 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Millions of routers vulnerable to new version of old attack - but not DIR-655!  (Read 4519 times)

Halibut Point Memory

  • Level 2 Member
  • **
  • Posts: 46
Millions of routers vulnerable to new version of old attack - but not DIR-655!
« on: July 21, 2010, 04:46:27 PM »
Finally some good news from the tech world. While we certainly have had our share of firmware SNAFU's, this is some good news.

I'd be curious, however, of the configuration they used...anotherwords, if they did or did not have SecureSpot enabled and so on.

I use a tiered combination of fail safes to protect my home network, beginning with OpenDNS, which has its own re-binding attack solution. It's nice to know that the DIR-655 is in that tier at least in theory.

Any comment by the tech support folks here on all this?
Logged

SirDevon

  • Level 1 Member
  • *
  • Posts: 1
Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
« Reply #1 on: July 22, 2010, 07:09:11 PM »
I think this link has the DIR-655 as being vulnerable to this hack...

http://blogs.forbes.com/firewall/2010/07/13/millions-of-home-routers-vulnerable-to-web-hack/

unless I am reading it wrong, seems a little confusing.
« Last Edit: July 22, 2010, 07:10:45 PM by SirDevon »
Logged

Halibut Point Memory

  • Level 2 Member
  • **
  • Posts: 46
Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
« Reply #2 on: July 23, 2010, 07:50:56 AM »
This is the ARS Technica list from their report. The ''YES'' means the router was successfully hacked. Notice that the DIR-655 indicates ''NO.''

https://spreadsheets.google.com/pub?key=0Aupu_01ythaUdGZINXQ5Vi16X3hXb3VPYkszNXM0YXc

I still would be interested in which configuration they had the DIR-655 when it was tested.
Logged

Sammydad1

  • Level 5 Member
  • *****
  • Posts: 722
Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
« Reply #3 on: July 23, 2010, 09:31:27 AM »
one place tests one version under one firmware and they say its safe ?

seems like their testing on the dir-655 is a little short on the completeness scale.....

first thing users need to do is change the default admin password...that will go pretty far in itself...
Logged
DIR-655 A2, FW: 1.35NA

dagger_99

  • Level 2 Member
  • **
  • Posts: 33
Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
« Reply #4 on: July 24, 2010, 08:08:11 AM »
Cool...so now we have a secure router that can't keep a wireless connection.

Let's rejoice at the good news...
Logged

Halibut Point Memory

  • Level 2 Member
  • **
  • Posts: 46
Re: Millions of routers vulnerable to new version of old attack - but not DIR-655!
« Reply #5 on: July 25, 2010, 03:38:31 AM »
Quote from: dagger_99 on July 24, 2010, 08:08:11 AM
Cool...so now we have a secure router that can't keep a wireless connection.

Let's rejoice at the good news...

Hehe...maybe that's why it's secure from these attacks.
Logged