D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#1

Post by Bender » Tue, Oct 08, 2019, 5:47 PM UTC

D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
threatpost.com

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#2

Post by dubyabee2 » Tue, Oct 08, 2019, 5:57 PM UTC

D-Link SIRT :: For Accurate and Up-to-Date information please go to: https://bit.ly/2nNawAc

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#3

Post by qwerty456127 » Tue, Oct 08, 2019, 6:07 PM UTC

For national security sake all routers should be required to support open firmwares.

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#4

Post by willis936 » Tue, Oct 08, 2019, 6:10 PM UTC

dubyabee2 wrote: post #2

D-Link SIRT :: For Accurate and Up-to-Date information please go to: https://bit.ly/2nNawAc

The irony of using a shortened link in a comment on cyber security.

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#5

Post by pxeboot » Tue, Oct 08, 2019, 6:13 PM UTC

Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#6

Post by frereubu » Tue, Oct 08, 2019, 6:14 PM UTC

willis936 wrote: post #4

dubyabee2 wrote: post #2

D-Link SIRT :: For Accurate and Up-to-Date information please go to: https://bit.ly/2nNawAc

The irony of using a shortened link in a comment on cyber security.

Non-shortened link: https://supportannouncement.us.dlink.com/announcement/public...

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#7

Post by nly » Tue, Oct 08, 2019, 6:16 PM UTC

It's times like this i'm glad my home router is a x86 mini PC running Arch Linux + iptables + Unifi (Complete with DNS MITM forcing all DNS out of my apartment over TLS)

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#8

Post by peterwwillis » Tue, Oct 08, 2019, 6:19 PM UTC

> D-Link last week told Fortinet’s FortiGuard Labs, which first discovered the issue in September, that all four of them are end-of-life and no longer sold or supported by the vendor

First released in 2011, EOL in 2018. Can't say I blame 'em, EOL is EOL, but it's also the new planned obsolescence. (Better buy a new router every 7 years or the hackerman'll get ya!)

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#9

Post by skwb » Tue, Oct 08, 2019, 6:22 PM UTC

This is precisely why I chose to install DD-WRT on all my routers. Not only does it give me more fine grain control over all my admin privileges, I know I don't have to rely on some company making the cost-benefit decision over if it's worth patching security bugs.

Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched

#10

Post by pessimizer » Tue, Oct 08, 2019, 6:25 PM UTC

qwerty456127 wrote: post #3

For national security sake all routers should be required to support open firmwares.

s/routers/computers/g