OT: Home router (broadband) vulnerability (DLink, Linksys, SpeedTouch)

["Edgar D' Souza" <edgar -dot- b -dot- dsouza -at- gmail -dot- com>]

Pardon the cross-post and OT thread, and pardon me if you already know
about this, but this concerns a lot of us who are broadband users. If
you wish to discuss on-list, please reply only to one list which you
want to discuss it on. Thanks.

Regards,
Ed.


>From http://www.channelregister.co.uk/2008/01/15/home_router_insecurity/
Security mavens have uncovered a design flaw in most home routers that
allows attackers to remotely control the devices by luring an attached
computer to a booby-trapped website.

And it works regardless the operating system or browser the computer
connected to the device is running, as long as it has a recent version
of Adobe Flash installed.

The most serious change that's possible is changing the the server PCs
connected to the router use to access websites. That might cause a
victim trying to access eBay or Bank of America to see spoofed pages
that steal their login credentials.

The hack could also allow attackers to open ports on a victim's
router. That would be useful in turning a router into what would
amount to a zombie machine by forwarding ports to an external server.

Routers made by Linksys, Dlink and SpeedTouch have been confirmed to
be vulnerable, and other manufacturers' products are also likely
susceptible to attack, the researchers said.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Create HTML or Microsoft Word content and convert to Help file formats or 
printed documentation. Features include support for Windows Vista & 2007 
Microsoft Office, team authoring, plus more.
http://www.DocToHelp.com/TechwrlList

True single source, conditional content, PDF export, modular help.
Help & Manual is the most powerful authoring tool for technical
documentation. Boost your productivity! http://www.helpandmanual.com

---
You are currently subscribed to TECHWR-L as archive -at- web -dot- techwr-l -dot- com -dot- 

To unsubscribe send a blank email to 
techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
or visit http://lists.techwr-l.com/mailman/options/techwr-l/archive%40web.techwr-l.com


To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com

Send administrative questions to admin -at- techwr-l -dot- com -dot-  Visit
http://www.techwr-l.com/ for more resources and info.