[clug] Drive-By Pharming Attack Could Hit Home Networks

Andrew Boyd facibus at gmail.com
Sun Feb 18 22:52:06 GMT 2007


On 2/17/07, Kim Holburn <kim at holburn.net> wrote:
<snip>

> The attack works because most of the popular home routers ship with
> > default passwords, default internal IP address ranges, and web-
> > based configuration interfaces.


<snip>

Hi Kim,

an observation: default password exploits have been with us for a very long
time, and it is a bit sad that router manufacturers don't seem to have taken
them seriously enough to force a change away from the default password on
first setup.

A question: is it all router manufacturers that do not force this change?

Cheers, Andrew


More information about the linux mailing list