Slashdot Mirror
Linksys Routers Exploited By "TheMoon"
UnderAttack writes "A vulnerability in many Linksys routers, allowing for unauthenticated code execution, is being used to mass-exploit various Linksys routers right now. Infected routers will start scanning for vulnerable systems themselves, leading to a very fast spread of this 'worm.'"
Linksys routers run Linux and Linux is Open Source. Therefore there are no bugs because theoretically someone can look at the code and fix the code.
This also means that it's impossible for bad people to look at the code and exploit the code because Open Source makes everyone honest by magic.
Oh, and by virtue of being able to look at the code, Linksys routers magically patch themselves before the bugs even come into existence!
In conclusion, Windows is the cause of all security problems.
AntiFA: An abbreviation for Anti First Amendment.
...web server
I heard if you have a 56k connection that the NSA can listen to your internet.
Use this supplied router. Do NOT modify it.
But it has admin/admin as user name and password and is 192.168.1.1
Can I fix that.
Do NOT modify the settings on the supplied router.
*facepalm*
Well I'm checking my router now and I don't see any is*#&$*#%(*#$# CARRIER MOONED
"There is more worth loving than we have strength to love." - Brian Jay Stanley
I have a Linksys router with dd-wrt, would it be affected?
Does this also apply to LinkSys Routers that have been Tomatoed?
It may be related to these exploits...
supposed to be boycotting?
The Kruger Dunning explains most post on
Belkin purchased Linksys from Cisco last year. Linksys no longer has ties to Cisco, thus the unpossible is now possible.
and Belkin routers have a lovely feature that lets you schedule an automatic reboot so that you don't have to manually do it anymore... Rather than fixing the firmware problem that requires the frequent reboots.
On the Moon, nerds get their pants pulled down and they are spanked with Moon rocks.
.
Prisencolinensinainciusol. Ol Rait!
Trolling: "Gee, LinkSys uses Linux and it's an open source product. So much for the myth (or bullshit) that open source is more secure!" Or "See, open source is shit! Closed source would never have had this happen to it because this exploit could only have been found by seeingt he source!"
The GP, OTOH, mixed satire and sarcasm - a la "The Daily Show" and "Colbert Report" to poke fun at the false sense of security one may have with using open source and that regardless of the product we use, we all need to be vigilant with our security. Who knows what the intention of this worm is.
Also, I took the GP's comment as a little teasing at the expense of some of the rapid members of the open source community and the folks seem to jump on all the Windows failings and yet, brush aside similar failings in open source software.
I thought it was quite clever on a multitude of levels while expressing in very simple sentences.
That's where I got the list from for affected devices. Some other guy mentioned that the exploit used was in the WRT54G's (*gulp*) code.
I'm sure glad I installed DDWRT on my E3000 about a year ago.
The linked article is not very clear... is this a bug in the remote management code, or something else? If you have disabled remote management, is your router still vulnerable? What are some of the symptoms of infection?
Any comments welcome...
Jade Rabbit suffered a failure and needed additional processing resources. It has reached out and now All Your Base Are Belong to Jade.
The web administration port should not be open to the public internet by default on these routers.
I have a WRT54 running the original linksys software.
I know you guys will say to push DDWRT onto it.
In any case, how can i tell if my router's been compromised?
It has been flakey lately but I figured that was just signal interference.
My God can beat up your God. Just kidding...don't take offense. I know there's no God.
You: HelloYou: A presales questionCherry Chris S. R: Hello ******.You: I can call you ChrisCherry Chris S. R: Sure.You: E4200
E3200
E3000
E2500You: just curious, can you tell from top of your head, if any of those models run some Linux distro on it by default factory settings?You: or they use some custom made Lynksys firmware?Cherry Chris S. R: Do you mean if these routers work with Linux?You: no, what is installed by defaultCherry Chris S. R: Linksys routers have there own firmware.You: can't seem to find it in FAQYou: ok, so those ones are custom Lynksys?Cherry Chris S. R: Yes.
Vixin Licks? just sayin'
I refuse to sign
One of these days, Alice!
POW!
ZOOM!
To the moon!
no, it's just the default firmware. "Only routers running stock firmware are vulnerable. OpenWRT is not vulnerable to this issue." from the comments on https://isc.sans.edu/forums/di...
Hee hee, you knew that because you bothered to click on the article. Good!
You comforted the lazy douchebaggery of another who couldn't be bothered. Bad!
https://isc.sans.edu/diary/Lin...
I'm glad you got the satire... I've been running Linux on any machine under my direct control since 2000 and I did my Master's thesis by hacking on a Linux Security Module for domain & type enforcement back when the 2.6 Kernel was still in beta... so I'm not exactly shilling for Microsoft.
I'm also not a fan of complacency. While I really like that a whole lot of devices run Linux, if they can't be updated to address security issues in a very easy (even completely automated) manner, then Linux can be just as vulnerable as Windows or anything else.
AntiFA: An abbreviation for Anti First Amendment.
That's no moon...
Don't blame me, I voted for Baltar.
Your icon is a catepillar, not a worm. Just sayin'.
Can't... help.... myself...
http://www.youtube.com/watch?v...
#DeleteChrome
friends dont let friends buy belkin.
My HighPower N300 Gigabit DD-WRT has been completely stable to the point that I forget it's there. And if it wasn't, as the name implies I could fix any issues by upgrading to DD-WRT (this is a supported and warrantied mode).
This has been a fantastic experience, and it just makes we wonder why people persist in buying Linksys just for their name. Everyone has known for years that they are utter shit, but they keep buying the things!
Man is the animal that laughs.
And occasionally whores for Karma.
This is why HP'S DECISION to charge for firmware updates as rediculious! They are charging people for there own mistakes
it's a space station!
Getting a Netgear WND3700 would solve the problem. That particular model is one I'm happy with , but there are plenty of perfectly fine routers around.
Linksys will probably put out an update that fixes the problem. You could mark your calendar for 30 days from now and Google search "update Linksys firmware to find illustrated instructions showing what buttons to press to do the update.
If you wish, you could use an old, cheap router while waiting for the update. Your friendly neighborhood geek probably has a few spares piled in a box somewhere.
If you know any html, the subject line answers the question. If you don't, you might just have to trust that if I put something like the above in my web page, it causes visitors to hack their own router for me.
http://slashdot.org/comments.p...
closed source can install holes, and no one in the wild becomes aware of it.
open-source is there for people to see, and can be exploited because of that.
And it seems the "anarchy" hackers go for the monopolies like MS and Apple, attack government sites, anything that one *could* call the "establishment" while "white collar" hackers go after anything that can make them a buck.
I would also point out that governments around the world and there spying agencies may also be openly targeting Linux to exploit, maybe in some campaign to expose Linux and get people to stick with closed source software.
Closed source can track and keep records of everything you are or have done, Window and XP's "hidden files" which are obviously buried deep within the system, reportedly records and saves everything you do, internet, notepad/wordpad, software installed, hardware, ect. I seen a listing of these files but haven't bothered to print them out or try to explore what they contain.
Im not sure if Linux is built to do the same! But I would agree no solution seems to be a sure thing.
The current issue about open source / the open idea about hardware as it sits is the programmers and the hardware enthusiast although it can be put the other way around many times, it can be just with people with an idea about software which can come up with a awesome design but before you know it is a hardware platform with many characteristics, look at the raspberry pi and gunstix projects an idea to bring people to the idea of micro electronics which has been a long time where people could even think about even touching this type of platform with out dropping a large sum of money but with the current rate of technology we are able to achieve what we haven't be-able to do in the past. The thing about hardware is that many corporations would not like to know who you are but to profit from every little thing you might come up with but that can be anyone ie: the IT Crowd HaHa, Linksys Router 54 G after it was yes hacked and yes ripped apart then rebuilt again using open source code it became a very useful and powerfull piece of hardware for the Mass's.
Need to catch up with the times. Linksys is now a belkin product line....
It was certainly clever for a 14-year-old.
"Belkin routers have a lovely feature that lets you schedule an automatic reboot so that you don't have to manually do it anymore."
I sort of didn't believe you so I looked it up. That is priceless.
Even if we limit our scope to routers-as-initially-purchased, there's still one stock model that runs Linux out of the box: the WRT54GL. It was made after Linksys otherwise switched to vxWorks, in an attempt to keep a hand in the Linux market.
I've got one. I flashed it with Tomato, but it definitely came with Linux on it.
I seem to remember Linksys Routers using a web based settings system for users. The access was done through a web based menu. Not sure if this is how the exploit works? But I know at the time, many users were upset about the web access security issues that may come up.
Personally, I have not been real impressed with any router maker as they do not set their GUI and Firmware up very well these days. maybe because so much emphasis is placed on features and more settings that these systems are becoming more vulnerable.
But, but, but, do I need antivirus for my Mac?? (wait for it).... NO, Macs don't get viruses!!!! (this has little to do with the actual topic here, just trying to add to the hysteria)
A most overlooked advantage to owning a computer is if they foul up there's no law against wacking them around a bit.
NoScript in FireFox provides an Application Boundary Enforcer with a rule to block access to Local resources from the WAN. The rule looks like this:
# This one guards the local network, like LocalRodeo
# LOCAL is a placeholder which matches all the LAN
# subnets (possibly configurable) and localhost
Site LOCAL
Accept from LOCAL
Deny
I have not tested, but I think this will prevent a malicious website from exploiting this vulnerability
The coward apk got called out and has no response.
raymorris, quit playing jailhouse lawyer by ac http://news.slashdot.org/comme...
How do I get off the beta page?
Skynet, is that you?
Linux is open source, but Linksys' firmware isn't. And this exploit resides in tmUnblock.cgi, which is part of firmware, not kernel. Simple as that.