Slashdot Mirror

← Back to Stories (view on slashdot.org)

Netgear's Amusing "fix" for WG602v1 Backdoor

Posted by CmdrTaco on from the get-your-giggle-on dept.

An anonymous reader writes "Recently Slashdot reported that the Netgear router has as WLAN backdoor. According to this report by the news service of the German publisher Heise Netgear "fixed" the problem with a firmware update. And what is the fix? According to Heise, they didn't remove the backdoor at all. Instead they just changed the login information! They replaced the old user name 'super' with 'superman', and changed the old password to '21241036'. "

9 of 515 comments (clear)

  1. Oops... by danielrm26 · · Score: 5, Funny

    Chalk up another loss for 'security by obscurity'.

    --
    dmiessler.com -- grep understanding knowledge
    1. Re:Oops... by AndroidCat · · Score: 5, Funny

      If someone war-chalks it up, it won't be obscure for long. What is the symbol for "lame gateway security"?

      --
      One line blog. I hear that they're called Twitters now.
    2. Re:Oops... by djansen · · Score: 5, Funny

      Well, it IS an improvement. The increase from 5 characters for the login to 8 now makes it SO much harder to crack. What was the old password? Someone do the math and figure out the number of new permutations they've added. Ha. I bet this is how the guy who did it justified the whole thing.

      "What da ya mean? It's MUCH more secure than it was before."

      Doh.

    3. Re:Oops... by Fjord · · Score: 5, Funny

      The first rule of passwords is that you do not talk about your passwords.
      The second rule of passwords is that you do not talk about your passwords.
      The third rule is if someone uses "password" or nothing, there is no password.
      The fourth rule is only one person to a password.
      The fifth rule is one password at a time.
      The sixth rule is no sheets, no stickies.
      The seventh rule is password will be expired when they have to

      and the final rule of passwords is, if it's your first logon, you have to set one.

      --
      -no broken link
  2. Nice fix. by SpyPlane · · Score: 5, Funny

    That would be like "fixing" Windows 95 with Windows ME.

    --
    "We need a fourth law of Robotics: Stop Fingering My Wife"
  3. Superman!! by Claire-plus-plus · · Score: 5, Funny

    Well at least sys-admins and network engineers can finally use the login name they think they deserve.

    --
    99 bottles of beer in 175 characte
  4. Re:At least ... by bje2 · · Score: 5, Funny

    That's amazing. I've got the same combination on my luggage.

    --

    "Facts are meaningless. You could use facts to prove anything that's even remotely true." - Homer Simpson
  5. Re:I wonder... by FearTheFrail · · Score: 5, Funny

    But it takes numbers + characters to make -strong- passwords. So the next logical step:

    Login: Theyllneverguess
    Password: cuzimso1337

    --
    ___ In the words of Gen. Douglas McArthur: "I'll be right back."
  6. Re:Not funny at all by Dutchmaan · · Score: 5, Funny

    This just isn't the way a responsible company behaves.

    responsible company

    Trying to put these two words together is like trying to touch two magnet ends with the same polarity.