Hi All

This reminded me of the film hackers. 22 years later it is happening for real did the producer see into the future...

http://www.bbc.co.uk/news/uk-wales-south-east-wales-40802887

_________________
A1200 ACA1232 128MB Indivison MkIICr
Elbox empty Power Tower
RPi3 Emulating C64 ZX Atari PS BBC
Wii with Amiga emulation
Vampire v4 SA

@g01df1sh

If nothing else, it's never boring when people do stuff like this.

People really do need to get a grip on basic security practices though. It seems like 99% of the time, they've just left the wifi switched on with the default password.

_________________
"Knowledge is power. Power corrupts. Study hard, be evil."

@g01df1sh

Cardiff? That must be one of the folks at Amigakit. No doubt!

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

@elwood

What would be cool if the hacker used a Amiga to hack it.

_________________
A1200 ACA1232 128MB Indivison MkIICr
Elbox empty Power Tower
RPi3 Emulating C64 ZX Atari PS BBC
Wii with Amiga emulation
Vampire v4 SA

@evilFrog

Aren't these different passwords these days? Here most big ISPs set you up with a cryptic password on the bottom of the router and most people use it. I've even seen a NetGear with a custom password for each model it looked like.

What concerns me is WPS. It's very good for going to your friends house and connecting your phone to their wifi. But how does it stop people people outside sniffing on the network? Some have pins but mostly you just press a button on the router and the phone auto connects.

@Hypex

Quote:

Hypex wrote: @evilFrog Aren't these different passwords these days? Here most big ISPs set you up with a cryptic password on the bottom of the router and most people use it. I've even seen a NetGear with a custom password for each model it looked like.

Well, yes and no. For many devices, the password is worked out using some sort of hashing algorithm based on a value that's (semi-)unique to the device. A big stumbling block with some of the early devices was to work from the MAC address of the WiFi interface.

Problem is, unless you're really careful or creative, there are only so many ways to skin that particular cat. Once you know enough info about the device, you can start to guess the password in a reasonable timeframe. You could certainly script a computer to do it for you, and then you can also assume any attacker will be packet-sniffing for good measure...

If you add to that the possibility that whoever bundles this hardware up into a saleable 'advertising solution' is probably having their techies work minimum possible pay and to a script, the possibility for stupid to happen somewhere in the chain is pretty high.

Last edited by evilFrog on 03-Aug-2017 at 09:17 PM.

_________________
"Knowledge is power. Power corrupts. Study hard, be evil."