Home Networks Hackable Via Web Browsers, Researchers Find
Engadget reports that Dan Kaminsky, a researcher at IOActive (a computer security company), has created a method to take control of routers, including those manufactured by Cisco's Linksys and D-Link. Called a "DNS rebinding attack," the maneuver uses JavaScript to force your Web browser to change your router's (the device connecting your computer(s) to the Internet) settings, giving a hacker access to your home Wi-Fi or wired network. Interestingly, Kaminsky says that the problem isn't in the routers -- it's a Web browser issue. His work demonstrates how hackers could take advantage of the design flaws in Web browsers to gain access to your files and network. Hopefully, the technique's demonstration at the RSA Conference in San Francisco this week will raise awareness about these issues.
The good news is that the method isn't perfect because it only works on unsecured routers. What does this mean for you? If you haven't set up a strong password on your router yet, we recommend you do it as soon as possible -- here's a quick tutorial.
From Engadget and PC World
Related Links:
Reader Comments (Page 1 of 1)
STNC @ Apr 16th 2008 12:43PM
NO WAY!!! I HAD NO IDEA!!!!
Duh