Slashdot Mirror

← Back to Stories (view on slashdot.org)

Sprint DSL's Security Hole Easy As 1,2,3,4

Posted by timothy on from the oh-didn't-you-catch-that dept.

An Anonymous reader points to this Wired article, excerpting "Sprint officials acknowledged that remote access to the administrative software embedded in the ZyXel Prestige 642 and 645 modems is by default protected with a password of '1234.' But the company said users are responsible for securing the equipment, which stores login data, including the user's e-mail address and password." Wired found that more than 90% of the modems they polled were using that default password.

2 of 373 comments (clear)

  1. Totally unprofessional by unterderbrucke · · Score: 1, Troll

    "Wired found that more than 90% of the modems they polled were using that default password."

    Believe it or not, "polling" modems by checking their passwords is hacking. If not hacking, it is at least dishonest. How can I trust Wired not to root around my box looking through my private files now that they "polled" my computer to make sure I didn't use a default password?

  2. obligatory reference by goatasaur · · Score: 0, Troll

    HA! I bet you thought I was going to make another Spaceballs reference.

    You couldn't be more wrong.

    Anyway, making a password system like this is stupid and careless. It's a safe bet that if you EVER set up a system (especially if popular and Internet-related) involving default passwords, it'll be compromised pretty quickly.

    How much harder would RANDOM passwords have been? Sprint is ignorant and careless and their mobile phone service sucks too.

    --
    ~D: