Fidonet Portal
On 08/30/14, Psi-Jack said the following...
Ps> Now, however, I run with an ASUS AC66U router, running with
Ps> AdvancedTomato firmeware which is absolutely beautiful. Rock solid,
Ps> never dies, just plain works. It's not perfect on WiFi though. For some
Came across this today.. RT-AC66U Dual-Band Wireless-AC1750 Gigabit Router
http://threatpost.com/unpatched-vulnerabilities-disclosed-in-asus-home-routers
"Vulnerabilities - Due in large part to an exposed $root share on the NVRAM
for Samba service, which was discovered in March of this year by another
researcher, on almost all of the above models that have enabled AiCloud
service, the end users will find themselves exposed to multiple methods of
attack and several dangerous remote exploits," Lovett wrote. The Linux-based
routers also expose credentials in clear text.
Once an attacker enters legitimate credentials on the RT-N16 and N16R routers,
they are able to control the admin console on the LAN side and eventually
control traffic moving through the local network, sniff packets or crash
systems.
He recommends disabling all UPnP services until a patch is available from
ASUS, and remove all remote access to the router for administration. Default
passwords for the router and AiCloud services should also be changed.
--- Mystic BBS v1.10 A51 (Windows)
* Origin: FlupH - fluph.darktech.org (46:1/102)
Ps> Now, however, I run with an ASUS AC66U router, running with
Ps> AdvancedTomato firmeware which is absolutely beautiful. Rock solid,
Ps> never dies, just plain works. It's not perfect on WiFi though. For some
Came across this today.. RT-AC66U Dual-Band Wireless-AC1750 Gigabit Router
http://threatpost.com/unpatched-vulnerabilities-disclosed-in-asus-home-routers
"Vulnerabilities - Due in large part to an exposed $root share on the NVRAM
for Samba service, which was discovered in March of this year by another
researcher, on almost all of the above models that have enabled AiCloud
service, the end users will find themselves exposed to multiple methods of
attack and several dangerous remote exploits," Lovett wrote. The Linux-based
routers also expose credentials in clear text.
Once an attacker enters legitimate credentials on the RT-N16 and N16R routers,
they are able to control the admin console on the LAN side and eventually
control traffic moving through the local network, sniff packets or crash
systems.
He recommends disabling all UPnP services until a patch is available from
ASUS, and remove all remote access to the router for administration. Default
passwords for the router and AiCloud services should also be changed.
--- Mystic BBS v1.10 A51 (Windows)
* Origin: FlupH - fluph.darktech.org (46:1/102)
On 08/31/14, Skuz said the following...
Sk> On 08/30/14, Psi-Jack said the following...
Sk>
Sk> Ps> Now, however, I run with an ASUS AC66U router, running with
Sk> Ps> AdvancedTomato firmeware which is absolutely beautiful. Rock solid,
Sk> Ps> never dies, just plain works. It's not perfect on WiFi though. For so
Sk> Came across this today.. RT-AC66U Dual-Band Wireless-AC1750 Gigabit
Sk> Router
Sk>
Sk> http://threatpost.com/unpatched-vulnerabilities-disclosed-in-asus-home-rou
yeah.. I never buy a router to use the stock firmware. it usually has issues,
like this one.
So, with that said, dd-wrt and tomato both work on this device making it
actually awesome.
>>>[Psi-Jack -//- Decker's Heaven]
--- Mystic BBS v1.10 A51 (Linux)
* Origin: Decker's Heaven * deckersheaven.com (46:1/142)
Sk> On 08/30/14, Psi-Jack said the following...
Sk>
Sk> Ps> Now, however, I run with an ASUS AC66U router, running with
Sk> Ps> AdvancedTomato firmeware which is absolutely beautiful. Rock solid,
Sk> Ps> never dies, just plain works. It's not perfect on WiFi though. For so
Sk> Came across this today.. RT-AC66U Dual-Band Wireless-AC1750 Gigabit
Sk> Router
Sk>
Sk> http://threatpost.com/unpatched-vulnerabilities-disclosed-in-asus-home-rou
yeah.. I never buy a router to use the stock firmware. it usually has issues,
like this one.
So, with that said, dd-wrt and tomato both work on this device making it
actually awesome.
>>>[Psi-Jack -//- Decker's Heaven]
--- Mystic BBS v1.10 A51 (Linux)
* Origin: Decker's Heaven * deckersheaven.com (46:1/142)