Slashdot Mirror
Netgear's Amusing "fix" for WG602v1 Backdoor
An anonymous reader writes "Recently Slashdot reported that the Netgear router has as WLAN backdoor. According to this report by the news service of the German publisher Heise Netgear "fixed" the problem with a firmware update. And what is the fix? According to Heise, they didn't remove the backdoor at all. Instead they just changed the login information! They replaced the old user name 'super' with 'superman', and changed the old password to '21241036'. "
Chalk up another loss for 'security by obscurity'.
dmiessler.com -- grep understanding knowledge
That would be like "fixing" Windows 95 with Windows ME.
"We need a fourth law of Robotics: Stop Fingering My Wife"
I thought the last article said changing passwords was a good idea! Make your minds up.
I jest of course.
----
Well at least sys-admins and network engineers can finally use the login name they think they deserve.
99 bottles of beer in 175 characte
But if they H?ler zur?zubringen , and the purchase price zur?zufordern... we are DOOMED!
This is not my opinion. Actually, it's not even an opinion. And I'm nowhere to be seen near it
They replaced the old user name 'super' with 'superman', and changed the old password to '21241036'. "
And thanks to Slashdot, thus begins an endless stream of firmware updates; every time Netgear "fixes" their problem, I'm sure an article here will put the cycle in motion again. Let's see, who wants to guess what they change the password to next?
"superduperman", anyone?
... the password is not 12345.
Signatures are for stupids.
This looks like a job for.......SUPERMAN!
disgusting
This is not my opinion. Actually, it's not even an opinion. And I'm nowhere to be seen near it
IN THE BACK DOOR....lol someone had to say it...
A backdoor? We're insecure? This looks like a job for... a random number generator!
There is no mod option "-1: Disagree" for a reason. "Overrated" is not an acceptable substitute. Post something instead.
Does anyone have a translation for those of us who can't read babelfish?
This just isn't the way a responsible company behaves.
responsible company
Trying to put these two words together is like trying to touch two magnet ends with the same polarity.
Now the hacker has to figure out which version of the firmware one is running in order to crack the password. And they can't figure that out without logging in. So everyone is safe now.
:-)
I tried for 5 years to come up with a clever sig...only to realize that I am not clever.
I for one like my whores anonymous. It keeps things simpler...
Oh, what exactly are we talking about again?
"Piter, too, is dead."
Those Netgear bozos really seem to be dumber then my cigar cutter.
And not nearly as sharp!
.signature not found
The new password is apparently someone's PHONE NUMBER in Germany! No idea whose, but I gleaned this tidbit by getting a Babelfish translation of the page (orig, in German). For those in the US - Is this the networking equivalent of calling Jenny? (867-5309)
Laws affecting technology will always be bad until enough techies become lawyers.
..is that they lost the source, and all they could do was to binary patch the firmware image.
;-(.
Sad, but true
(or not)
Remember me to change the password of my briefcase.
Must be the subtitles from the Korean bootleg version.
The technology, which allows anyone to access enterprise networks when they enter 'superman' for the username and and '21241036' for the password, frees enterprises from worrying about security issues and allows IT managers to focus on implementing talking paperclips on enterprise desktops. "We are excited about the new technology," commented Steve Hjarkblonka in an interview. "For the first time since the invention of computers, the threat of security intrusions has been completely eliminated. Enterprises can now enjoy 100% unbreakable security."
Geoff Nikreny, chief security officer with Endostar Inc, calls the secure-by-default approach, in which once-vulnerable features are patched, a "mistake" that will lead to deployment confusion. But he doesn't know what he's talking about anyway. So for 100% unbreakable security, buy Netgear.
Offer good while supplies last.
Netgear has posted a whopping 1300 firmware design jobs on monster.com!
I can count to 1023 on my hands. Ask me about #132.
"Well, I suppose we could just change the username and password..."
"DO IT!"
"If you say so, sir"
Pure speculation, of course.
...how many times did they use the generator before settling on the number to use? Nobody in the history of the world has been satisfied by the FIRST random number generated!
"No....no...no...maybe if it had a '7'. AH! Bingo!" -- Netgear Security Engineer
"These people look deep within my soul and assign me a number based on the order in which I joined" --Homer re:
Speak truth to power.
In a related story, Netgear has announced the formation of a new security division, formed with ex-Microsoft employees...
I wonder what DC Comics (and the other owners?) have to say about NetGear using their copyrighted character in a commercial product ?
"Whoever would overthrow the liberty of a nation must begin by subduing the freeness of speech."--Benjamin Franklin
"Oh, the white airbags don't work? Here, let me paint it blue."
In my day, the grease-on ben-tra ran like grease on a pan - that had been burned in place and left there for weeks. Our grease-on ben-tra had a zero to sixty time of sixty seconds, and couldn't steer without rattling like the bones of Buddy Holly. Fuel efficiency? That thing drank like an ex army sergent. And it broke down more often than Tammy Fae. Often times we would be driving it to the shop, and it would break down again on the way. You'd hook it up to the tow truck because of a broken front wheel and the rear axle would crack. Load it on the back, and the bumper would fall off. That thing wasn't a deathtrap: deathtraps have moving parts.
Hope you like it. Have fun with your car!
(note: it was an '86. I've heard they have gotten better.)
The ______ Agenda