Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by n1 on Thursday November 12 2015, @11:48AM   Printer-friendly
from the air-gap-the-router dept.

A hacked/compromised router is the worst thing that can happen to computer users.

Any computing device (smartphone, tablet, laptop, desktop, refrigerator) sitting behind a compromised router can be attacked in every known way.

Needless to say, a router can be used for spying, not just on normally insecure communications but its also a perfect host for man-in-the-middle attacks on supposedly secure communication (SSL/TLS/HTTPS).

Compromised routers can send victims to scam versions of websites, a great way to collect passwords. In August, Jeff Atwood wrote about two people whose routers were hacked. One router modified web pages to show extra ads, another tricked a victim into installing a hacked version of the Chrome browser. And, of course, a router can be used to install malware on computers too. Did your last Flash update really come from Adobe? How would you know?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by NotSanguine on Thursday November 12 2015, @01:13PM

    by NotSanguine (285) <reversethis-{grO ... a} {eniugnaStoN}> on Thursday November 12 2015, @01:13PM (#262125) Homepage Journal

    A hacked/compromised router is the worst thing that can happen to computer users.

    Isn't that statement a bit hyperbolic? Just sayin'.

    I don't know, a faulty power supply blowing up in your face could be much worse. Deadly even.

    A lightning strike while touching the metal case of your computer could suck worse too.

    A "friend" loading child porn on your computer and calling the FBI on you would likely be much worse as well.

    In fact, there are so many things that are worse than having your router compromised that the whole premise is ridiculous.

    I won't even get into the whole home invasion or bar fight with a gun nut stuff either.

    I'd posit that having your router compromised is better than a sharp stick in the eye. Then again, what isn't? Well, okay, maybe a dull stick in the eye.

    That's not to say that bad things can't happen if your router is compromised, but it's not nearly the level of pain that could befall someone. What's more, securing your router is neither difficult nor time consuming.

    N.B. I did not read TFA.

    --
    No, no, you're not thinking; you're just being logical. --Niels Bohr
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2, Funny) by Anonymous Coward on Thursday November 12 2015, @01:20PM

    by Anonymous Coward on Thursday November 12 2015, @01:20PM (#262128)

    Hyperbole is the worst thing that can happen to computer users.

  • (Score: 2) by LoRdTAW on Thursday November 12 2015, @01:44PM

    by LoRdTAW (3755) on Thursday November 12 2015, @01:44PM (#262135) Journal

    What's more, securing your router is neither difficult nor time consuming.

    Tell that to my mother who for a long time couldn't fully grasp the concept of having more than one window open. She was the kind of person who would have 50 instances of calculator open. Not her fault, she never used a computer until she was in her late 40's. Of course she has me to help her when she needs it but many people don't have that luxury.

    This is why Verizon thankfully uses random passwords on their newer Fios routers.

    • (Score: 0) by Anonymous Coward on Thursday November 12 2015, @01:53PM

      by Anonymous Coward on Thursday November 12 2015, @01:53PM (#262138)

      Oh, it's trivial to secure the router. It just takes removing one plug. The only downside is that this also makes it much less useful. ;-)

    • (Score: 1) by termigator on Thursday November 12 2015, @08:58PM

      by termigator (4271) on Thursday November 12 2015, @08:58PM (#262353)

      And verizon stores that password on their servers. The more secure thing is to disable wireless on the verizon router and use your own access point.

  • (Score: 0) by Anonymous Coward on Thursday November 12 2015, @09:06PM

    by Anonymous Coward on Thursday November 12 2015, @09:06PM (#262359)

    What's more, securing your router is neither difficult nor time consuming.

    Router hardening is both difficult and time consuming. In fact, that is how I make my living: as an infrastructure security engineer. To say that router security isn't difficult is the same sort of ignorance that led regular users to not care about their privacy. A lack of imagination and knowledge about security does not negate the difficulty or necessity of defense.

    • (Score: 2) by NotSanguine on Thursday November 12 2015, @10:35PM

      by NotSanguine (285) <reversethis-{grO ... a} {eniugnaStoN}> on Thursday November 12 2015, @10:35PM (#262391) Homepage Journal

      What's more, securing your router is neither difficult nor time consuming.

      Router hardening is both difficult and time consuming. In fact, that is how I make my living: as an infrastructure security engineer. To say that router security isn't difficult is the same sort of ignorance that led regular users to not care about their privacy. A lack of imagination and knowledge about security does not negate the difficulty or necessity of defense.

      Funny that. I've spent the better part of the last fifteen years making a living doing similar stuff. WRT enterprise environments you're entirely correct. However, TFA and the discussion focuses on home/Wifi routers, which are, in terms of complexity and configurability, worlds apart from enterprise environments.

      Comparing the the complexity of securing and configuring a Linksys or Netgear home router with, say, a Nexus 9000 (or even a Cisco 2800) is like comparing a the engineering on a skateboard with that of the the F35.

      Yes, you have a particular and important skill set. One that will likely keep you gainfully employed for a long time. However, to blatantly rip off Quentin Tarantino: comparing home and enterprise routers ain't the same thing. It ain't the same ball park, Hell, it ain't even the same fucking sport!

      --
      No, no, you're not thinking; you're just being logical. --Niels Bohr