Skip to Content

AOL Tech

router posts

Computers, Web

Lazy Passwords Leave 21K Routers, Cams, Phones Open to Attack


In the "yet another thing to be paranoid about" category comes a report that nearly 21,000 routers, webcams and VoIP products are wide open to remote attack, simply because their owners have committed the ultimate sin: failing to change the manufacturer's default password for the devices.

The study was performed by Ang Cui, a grad student at Columbia University's Intrusion Detection Systems Laboratory, which has sponsored the likes of DARPA and the Department of Homeland Security. Researchers have now scanned over 130 million IP addresses, and discovered nearly 300,000 devices to be remotely accessible. And the 21,000 devices with default passwords are, of course, the most vulnerable -- "runts of the litter", if you will.

Read more →

Advice, Tech Tips

Improve Your Wi-Fi Performance


If you're finding your Wi-Fi is flaky, it could be a cordless phone, microwave or another network causing interference. Using your setup software, trying switching the broadcast channel, which is just like switching a TV channel. If your base station has it, try enabling "interference robustness." It will slow speeds a little but ensure a good connection. Now you won't have to steal service from your neighbor anymore. Another option is this DIY method we've recommended.

Click here for more Tech Tips.

Computers

Wi-Fi Hotspots Could Spread Viruses, Experts Say

Digital Wi-Fi Virus Outbreak Modeled
Scientists use computer simulations to model all sorts of things, from the spread of weather patterns to the spread of disease. But a quartet of researchers at the Indiana University School of Informatics are actually using a computer simulation to simulate other computers, attempting to determine how quickly a widespread attack on public Wi-Fi access points would spread across its user base.

Hau Hu, Steven Myers, Vittoria Colizza and Alessandro Vespignani created a model of known public access points in seven metropolitan areas, including downtown Manhattan. They then used known statistics (like, for instance, 40-percent of all Wi-Fi points have no protection at all), and simulated a sequence of events that, in a mere two weeks, would result in 18,000 infected access points in New York City. In this case, "infected" means hackers' gaining access to the Wi-Fi router and modifying it to automatically distribute viruses and steal information in a way similar to that of the Zlob malware we covered last year.

If there's some good news here, it's that the simplest of protection mechanisms on your wireless router can prevent it from being compromised. Don't know where to begin? You can start by clicking here. [From: BBC News]


Related Links:

Computers

Popular 'WPA' Wi-Fi Security System Cracked by Expert

WPA cracked in 15 minutes or less, or your next router's free
They always knew it could be done; that a hacker with enough time and processing power could watch your WPA-protected wireless network and, eventually, decrypt your precious datas. In under 15 minutes, though? "Inconceivable!" those hypothetical security experts would say -- but they're about to get a lesson from Wi-Fi wizard Erik Tews. He'll be giving a presentation next week at the PacSec Conference in Tokyo, describing the "mathematical breakthrough" that, he says, enables him to crack WPA-TKIP -- which, until now, has been considered one of the most secure ways to keep your Wi-Fi network private -- in 12 to 15 minutes.

There are some limitations, as the data sent from a connected device to the compromised Wi-Fi router is apparently still safe, but anything headed the other way is wide open, and could even be supplanted by bogus bits sent from a Cheetos-munching hacker slouching in a rusty Ford Taurus in the parking lot.

Don't believe us? Tews was the guy able to crack WEP in under a minute last year, ironically advising people to switch to WPA ASAP at the time. We can only assume WPA2 is next.

Computers, Advice

New Malware Can Alter Your Wireless (Wi-Fi) Router and Steal Your Info

Zlob, one of the most common pieces of malicious software (according to Microsoft), has undergone a frightening transformation. After infecting a victim's PC, Zlob checks to see if the computer is connected to a wireless router (the device that helps create the Wi-Fi hotspot in your house). If connected, then Zlob attempts to gain access by using a list of common and default username and password combinations.

Assuming Zlob gains access to the router, the software then changes the DNS settings on the router to send all traffic through a hackers' servers first. DNS servers act like a phone book for the Internet, connecting the user readable addresses like Switched.com to the IP addresses that are understood by computers.

Unfortunately, most people don't bother changing the default password on their routers, thus making it easier for Zlob to infiltrate computer networks and potentially steal personal data and information.

Avoiding being beaten by this attack is relatively easy. First, set up proper security software on your PC (anti-virus and a firewall) and keep it up to date. Second, always change the default administrator passwords on your equipment, especially your router. If an attacker is able to gain access to your router, it can access your entire computer network. [Source: Washington Post]

Computers

Home Networks Hackable Via Web Browsers, Researchers Find

Engadget reports that Dan Kaminsky, a researcher at IOActive (a computer security company), has created a method to take control of routers, including those manufactured by Cisco's Linksys and D-Link. Called a "DNS rebinding attack," the maneuver uses JavaScript to force your Web browser to change your router's (the device connecting your computer(s) to the Internet) settings, giving a hacker access to your home Wi-Fi or wired network.

Interestingly, Kaminsky says that the problem isn't in the routers -- it's a Web browser issue. His work demonstrates how hackers could take advantage of the design flaws in Web browsers to gain access to your files and network. Hopefully, the technique's demonstration at the RSA Conference in San Francisco this week will raise awareness about these issues.

The good news is that the method isn't perfect because it only works on unsecured routers. What does this mean for you? If you haven't set up a strong password on your router yet, we recommend you do it as soon as possible -- here's a quick tutorial.

From Engadget and PC World

Related Links:

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling