Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Submission + - SPAM: Exploit Revealed For Remote Root Access Vulnerability Affecting Many Routers

Orome1 writes: Back in January 2013, researchers from application security services firm DefenseCode unearthed a remote root access vulnerability in the default installation of some Cisco Linksys (now Belkin) routers. The flaw was actually found in Broadcom’s UPnP implementation used in popular routers, and ultimately the researchers extended the list of vulnerable routers to encompass devices manufactured by the likes of ASUS, D-Link, Zyxel, US Robotics, TP-Link, Netgear, and others. Since there were millions of vulnerable devices out there, the researchers refrained from publishing the exploit they created for the flaw, but now, four years later, they’ve released their full research again, and this time they’ve also revealed the exploit.
Link to Original Source

Submission + - FTC Has Serious Concerns About IoT Security and Privacy

Trailrunner7 writes: The Federal Trade Commission has sent comments to the Department of Commerce, outlining a list of concerns about the security and privacy of connected and embedded devices, saying that while many IoT devices have tangible benefits for consumers, “these devices also create new opportunities for unauthorized persons to exploit vulnerabilities”.

One of the key security problems that researchers have cited with IoT devices is the impracticality of updating them when vulnerabilities are discovered. Installing new firmware on light bulbs or refrigerators is not something most consumers are used to, and many manufacturers haven’t contemplated those processes either. The FTC said the lack of available updates is a serious problem for consumers and businesses alike.

“Although similar risks exist with traditional computers and computer networks, they may be heightened in the IoT, in part because many IoT chips are inexpensive and disposable, and many IoT devices are quickly replaceable with newer versions. As a result, businesses may not have an incentive to support software updates for the full useful life of these devices, potentially leaving consumers with vulnerable devices. Moreover, it may be difficult or impossible to apply updates to certain devices,” the FTC comments say.

Comment Nice to know that this is based on an agreement (Score 1) 220

Further to the point, the March 1, 2010 Registered Apple Developer Agreement is available publicly online and indexed by Google. Most of the points the EFF took issue with were removed due to public outcry years ago. Why is the EFF still referring to an earlier agreement that is no longer applicable?

Comment Nice to know that this is based on an agreement (Score 1) 220

Thank you, I wondered if anyone else would have caught that.

5 years later, Jobs has been dead for over two years, Tim Cook is at the helm, there are open-source apps, and the developer agreement has changed a lot. The "imminent launch of the iPad" has been replaced by "Tablet Sales Growth Plummets In 2014" and we still don't see an EFF app.

I haven't been too worried about it though.

Comment What's wrong with Windows Server? (Score 5, Informative) 613

My experiences with systemd have been good and I can see how it can eliminate some of the kludges I've relied on in the past. Rather than have an /etc/init.d/myservice restart all related services to ensure a "clean" environment, I can list dependencies and triggers and rely on the system to do what is appropriate. It doesn't eliminate the ability to create or use System V init scripts, it just provides administrators with an alternative. Given the distribution creators have put a lot of effort into converting their scripts we have a lot of examples to work from. I've been working with UNIX since the 80's and rather than adopt a "get off my lawn" mentality I'm looking forward to embracing solutions to modern problems and see this as a positive step forward.

Slashdot Top Deals

All syllogisms have three parts, therefore this is not a syllogism.

Working...