Sprint DSL's Security Hole Easy As 1,2,3,4

← Back to Stories (view on slashdot.org)

Sprint DSL's Security Hole Easy As 1,2,3,4

Posted by timothy on Thursday January 23, 2003 @08:59AM from the oh-didn't-you-catch-that dept.

An Anonymous reader points to this Wired article, excerpting "Sprint officials acknowledged that remote access to the administrative software embedded in the ZyXel Prestige 642 and 645 modems is by default protected with a password of '1234.' But the company said users are responsible for securing the equipment, which stores login data, including the user's e-mail address and password." Wired found that more than 90% of the modems they polled were using that default password.

9 of 373 comments (clear)

Shit by Anonymous Coward · 2003-01-23 09:01 · Score: 5, Funny

Time to change the combo on the luggage again.
1. Re:Shit by deadsaijinx* · 2003-01-23 14:21 · Score: 3, Funny
  
  can anyone say space balls.
  "tell us the combonations to the air lock."
  "fine, i'll tell. its ... 1 . 2 . 3 . 4 . 5..."
  "1,2,3,4,5?! that's the kind of code an idiot would put on their baggage!" (president scrooge arrives)
  ""so whats the combo"
  "the combo is 1,2,3,4,5."
  "woah, what a coincidence. thats the exact same code i have on my luggage!"
  
  ----i love that movie ----
  
  --
  YOU SUCK BALLS!
Obligatory Space Balls Quote... by kenthorvath · 2003-01-23 09:03 · Score: 4, Funny

President Skroob: "What's the combination?"
Colonel Sandurz: "1-2-3-4-5."
Skroob: "1-2-3-4-5?"
Sandurz: "Yes."
Skroob: "That's amazing! I've got the same combination on my luggage!"
So, who needs Kevin Mitnick? by Uninvited+Guest · 2003-01-23 09:03 · Score: 4, Funny

Who needs a social engineer to get the password, when we have the fine folks at Sprint around.

--
Sometimes I worry that I'll develop Alzheimer's disease, but no one will notice.
New Sprint Ad by Lord_Slepnir · 2003-01-23 09:08 · Score: 5, Funny

Can j00 0wnz0r me now? g0000d!
Randomize by Jason1729 · 2003-01-23 09:09 · Score: 2, Funny

ZyXel should set it so the password is randomized by default. That way, it might not be possible for the user to get in, but at least it will be more secure. For boosted security, they could make it re-randomize the password every hour.

Jason
ProfQuotes
1. Re:Randomize by grub · 2003-01-23 09:13 · Score: 2, Funny
  
  For boosted security, they could make it re-randomize the password every hour.
  
  Yes, that makes a lot of sense, randomly change the password and lock out the user after an hour. Or were you suggesting something even more brilliant: change the password and display it on the user's screen?
  
  Sheeeesh.
  
  --
  Trolling is a art,
Re:Unrelated, but much more serious security hole by Neon+Spiral+Injector · 2003-01-23 09:24 · Score: 4, Funny

Maybe you missed it cause it was only posted once.
keeping their eye on you? by brer_rabbit · 2003-01-23 11:29 · Score: 2, Funny

how exactly do you come to the conclusion that your ISP was "keeping an eye on you"? I mean, what evidence did you see... % wget http://some.site.out.there/foo --15:23:09-- http://some.site.out.there/ => `foo' Connecting to 1.2.3.4:80... connected! HTTP request sent, awaiting response... 200 OK Length: 666 [text/html] 0K -> .....we... ...are.... .watching. ..you..... [100%]