Mailinglist Archive: opensuse (3901 mails)

["david rankin" <drankin@xxxxxxxxxxxxxxxx>]

> Are wired routers as easily hacked as wireless ones?  And how much does it
> help to change the router password from the default?

The answer is yes (unless some wardriver is outside, then the wireless would 
be easier). Basically, you are talking about an attacker compromising 
software protection to your router configuration from the WAN side. Once he 
(or she) has control of your router, then they can open any ports they 
desire and blast away at your computer trying to get it. Now I'm not an 
expert on all exploits that exist, but with regard to your password 
question, it goes like this:

On your typical cable/dsl router, there is usually an option for remote 
administratioin. If you enable remote administration and don't change your 
password, then everybody on earth with the same type of router manual has 
free access to your system simply by entering the default password. So 
change your password. (123456) is not a good choice.

If remote admin is not enabled, unless another exploit exists to get in from 
the outside -- then it is really a who cares situation. However, if they do 
get through the router and then talk to your router from the LAN side, same 
result. Anybody with a router manual has the default password, so they have 
control of your router again. So again -- change the password.

For the most part, the Linksys, Belkin, D-Link, etc.. boxes to a pretty good 
job. They are not bulletproof, but 99.999% of the time, they are more than 
sufficient. Set them up, turn the ping response off, change the password, 
and forward only the ports you require to the machine that needs it and turn 
off the services that are not required on the receiving machine.

--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankin-bertin.com
--
----- Original Message ----- 
From: "Paul W. Abrahams" <abrahams@xxxxxxx>
To: <suse-linux-e@xxxxxxxx>
Sent: Thursday, January 06, 2005 10:43 PM
Subject: [SLE] Hacking routers


> On Thursday 06 January 2005 11:25 pm, Örn Einar Hansen wrote:
> > Þann Föstudagur 07 janúar 2005 02:04 skrifaði Michael W Cocke:
> > >
> > > You're behind the times.  Try 20 minutes.
> > >
> >   It requires a certain amount of "megabytes" for it to be hacked ... I
> > stated, there's no such traffic going through my wireless. :)
>
> Are wired routers as easily hacked as wireless ones?  And how much does it
> help to change the router password from the default?
>
> Paul
>
>
> --
> Check the headers for your unsubscription address
> For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
> Also check the archives at http://lists.suse.com
> Please read the FAQs: suse-linux-e-faq@xxxxxxxx