Sprint DSL's Security Hole Easy As 1,2,3,4

An Anonymous reader points to this Wired article, excerpting "Sprint officials acknowledged that remote access to the administrative software embedded in the ZyXel Prestige 642 and 645 modems is by default protected with a password of '1234.' But the company said users are responsible for securing the equipment, which stores login data, including the user's e-mail address and password." Wired found that more than 90% of the modems they polled were using that default password.

Comments

FP

[YourMissionForToday]

Enjoy it when you lick my fist, commie!

First Post

[Anonymous Coward]

That was easy as 1,2,3,4

Totally unprofessional

[unterderbrucke]

"Wired found that more than 90% of the modems they polled were using that default password."

Believe it or not, "polling" modems by checking their passwords is hacking. If not hacking, it is at least dishonest. How can I trust Wired not to root around my box looking through my private files now that they "polled" my computer to make sure I didn't use a default password?

obligatory reference

[goatasaur]

HA! I bet you thought I was going to make another Spaceballs reference.

You couldn't be more wrong.

Anyway, making a password system like this is stupid and careless. It's a safe bet that if you EVER set up a system (especially if popular and Internet-related) involving default passwords, it'll be compromised pretty quickly.

How much harder would RANDOM passwords have been? Sprint is ignorant and careless and their mobile phone service sucks too.

Re:Unrelated, but much more serious security hole

[jgerman]

I would say it gives new meaning to the word dumbass. Both you and the moderators who modded you up. Do some research, the cvs exploit was posted a few days ago.