Slashdot Mirror
Netgear and ZyXEL Confirm NetUSB Flaw, Are Working On Fixes
itwbennett writes: In follow-up to a story that appeared on Slashdot yesterday about a critical vulnerability in the NetUSB service, networking device manufacturers ZyXEL Communications and Netgear have confirmed that some of their routers are affected and said they are working on fixes. ZyXEL will begin issuing firmware updates in June, while Netgear plans to start releasing patches in the third quarter of the year.
If anytone is going to confirm anything around here, it will be Netcraft!
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Learn the truth and ignore the propaganda. The system is coming for you, next... Wise up.
https://www.youtube.com/watch?...
That's what happens with you trust open sores software. Freetards writing C code is dangerous.
Yeah, we need some of that always safe commercial stuff there Trollerena.
Anyone who gets that reference wins one internet.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
That being said culturally we are being morally bankrupted more by a culture of fear and secrecy than hackers. Gag orders only work to cause public distrust in the long run and so does a lack of transparency.
The vulnerabilities in these devices will not cause problems long term because their code is transparent the same thing cannot be said about closed source devices. Fortunately Microsoft is transparent and does appreciate users telling them about security flaws otherwise I would never use a Windows device again. Naturally the flaws that exist are harder to fix but at least they do try to make their products and OSes bullet proof from the NSA. Touch wood.
This message was not sent from an iPhone because Peter Sellers really was a deviated prevert without a dime for the call
Dude I loved that album!
Mod me down, my New Earth Global Warmingist friends!
"open sores software"
There's an anti-virus which can treat that.
"National Security is the chief cause of national insecurity." - Celine's First Law
Turn off the equipment, and take up knitting...
“He’s not deformed, he’s just drunk!”
Like, seriously, will they only patch their current routers or all their past ones that are discontinued by now?
zyxel is still a thing?
You'd think that brand (name) would have died a decade ago.
Two words:
goto fail.
You're soaking your fingers in it.
Frankly, if you're still using NetBEUI in this day and age, you deserve what you get...
NetUSB by the company KCodes is proprietary not open source software.
They made *killer* modems in the last days of the BBS era. They were really the only company that could complete (and dominate) over the USR Courier, which was the gold-standard in its many forms from the late '80's to the late '90's. ZyXel was also making the U1496, etc. in Germany at the time.
Now, they seem more than content to sell Linksys-like shrinkwrapped China-junk @ Frys.
RIP. ZyXel (oh, and USR...)
You're soaking your fingers in it.
Something tells me you don't get the reference.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
A critical vulnerability will be fixed some many months from now. Gee, thanks!
I'll stick with my open-source solutions, thanks!
Morons, or maybe I should say "assholes".
doesn't winnuke prove that closed sores software is no better? After all, you shouldn't pick at closed sores.
Its really all about the stupid end user who can't setup a router without all these features. UPnP was the same issue, make it so everything sets up easily but you also end up with a potential point of hacking the router. I also do not see the router makers doing a whole lot to test their firmware. many times its feels like a after thought in terms of security. Its more about function and removing the frustration of setup for the dumb consumer.
Lets say I want to update my FW because I don't want the NSA to exploit it. How do I know I'm downloading it from Netgear (or any other major home router vendor) rather than a NSA hijacked page? None of them do https.
I want this account deleted.