Recent content by Falk80211

- The update can be done after the router have been idle for a while. - And on/off choice for this feature - with on as default. Then it's at least more up to the user. - The software can be designed so that the web browser will display a page to reboot the router. It's can be a solution for...

I don't think it's overblown, at least when also looking on the AiCloud-issue. There will continue to be open routers for a long long time. And there will be routers where the passwords from the AiCloud hacks will work. In some cases, these passwords will also be used by the VPN-service that...

There is a lot of routers with NAS-features and NAS-units from Synology, Qnap, Netgear, WD and more on networks with 445 open. And this can be just as scary as a open ftp. A lot of NAS-units can be accessed directly through smb - find them with Shodan, and runst run \\<ip> in Windows. Many...

This is a old security hole, but there are so few that updates the router. There should be some kind of automatic update feature. The AiCloud-issue was fixed last summer. The ftp-issue last month. But for the firmware from last month, you'll have to download it manually from Asus website...

Is anything done with the WPS-implementation on newer routers, expect adding a limit on how often you can try to connect? There was some talks earlier in regards on WPS 2.0, but there is no such thing so far?

Yeah. User error. But the number of units which allows anon FTP access seems to be surprisingly high. E.g. Germany - 3000 units with ftp running. 1200 with open access.

Seems like there is quite many of those who have FTP activated on the Asus-routers, that have it open for the world to see... quite scary what users are sharing of personal data without their knowledge and it's easy to find the routers that are open. Asus will fix it in upcoming firmware...