Live data from Hacker News

Please log in with router's password

google.com

211–220 of 265 posts

Re: Please log in with router's password

#211
post #194
post #160

Earlier quoted context omitted.

What router does HN recommend for consumers? I personally run Ubiquiti Unifi gear, but they're not exactly consumer friendly (more geared to power users).

I use Synology but admittedly have don't have a deep understanding of networking or security. It works for me and is very user friendly.

What Synology products do you use? I was not aware they offered routers.

Re: Please log in with router's password

#212

Earlier quoted context omitted.

One problem is the software on the router is likely to be outdated and vulnerable, and upgrades are not under your control.

Isn't that equally as true of a VPN service as of a web service?

The issue at hand is which hardware device is exposed to the external network, not which software.

Re: Please log in with router's password

#213

Earlier quoted context omitted.

All I'm going to say about Shodan is... Too many people leave the default password on internet connected devices. Seriously, anything is better than the default password.

Or there is no password at all, like say a lot of HP printers.

On Konica-Minolta printers the password is almost always the same. My school IT admin explained that they're pretty much always rented or "bought" with a mandatory support contract and the contractors get really annoyed when the admin password isn't the default one, since it's supposed to be "their" password.

Re: Please log in with router's password

#214
post #64

Earlier quoted context omitted.

This reminds me of when Sergey Brin explained recursion to Terry Gross in this interview (14:45 seconds into the interview) https://freshairarchive.org/segments/google-founders-larry-p...

Terry Gross is one of the very best interviewers I have ever heard. Her interviews and classical music alone make public radio worthwhile.

This was fun: https://www.youtube.com/watch?v=YTVFNZKuN-g

Re: Please log in with router's password

#215
post #23

Earlier quoted context omitted.

Are Skydrive documents somewhat public or are people just sharing them by mistake? I don't use it nor am I that familiar with it.

You can create a long complicated link to share with other people, even people without Skydrive/OneDrive/Dropbox/Google Drive accounts. But sometimes people publish these links somewhere where a search engine's crawler sees it and follow it. I remember spotting someone's URL to a Google Doc on their screen which their camera caught in their YouTube video. I manually typed it into my browser's URL bar and voila, I cou…

I've got a great story about this, ad absurd, from a HIPAA-covered entity.

IT turned on One Drive backups for their desktop image, without communicating to users.

A week later, there's a flurry of a few tens of thousand angrygrams about users storing sensitive documents in the cloud.

... by which they meant (in user terms) "having files on your Desktop."

Re: Please log in with router's password

#216
post #185

Earlier quoted context omitted.

> https://me.shodan.io … this looks up information in the existing Shodan database - it doesn't launch a scan. But do you discard the IP or save it for future scans? :p

That's not how it works. Shodan continuously checks all IPs on the Internet. When you visit the website you're checking for existing information in the database. Your use of the Shodan website/ API doesn't change how Shodan crawls the Internet.

How do I check my server, which doesn't have a browser installed?

Re: Please log in with router's password

#217
post #23

Earlier quoted context omitted.

Are Skydrive documents somewhat public or are people just sharing them by mistake? I don't use it nor am I that familiar with it.

You can create a long complicated link to share with other people, even people without Skydrive/OneDrive/Dropbox/Google Drive accounts. But sometimes people publish these links somewhere where a search engine's crawler sees it and follow it. I remember spotting someone's URL to a Google Doc on their screen which their camera caught in their YouTube video. I manually typed it into my browser's URL bar and voila, I cou…

Perhaps URLs should have an escape character which says that sensitive information starts/ends, so browsers can take appropriate action.

Re: Please log in with router's password

#218
post #2

To the reader: if this is your first exposure to finding things that aren't supposed to be exposed to the internet and you're finding it interesting enough to want to learn more, there's a tool commonly used among security practitioners called Shodan that enables a much more tunable search for exposed assets. https://en.wikipedia.org/wiki/Shodan_(website) - deeper reading. I'm not affiliated. --- It's also a super ba…

Not that I didn't know about its existence, but I just entered the IP of my VPS and noticed that Portainer was bound to 0.0.0.0... I thought I had it bound to the docker bridge so now I've got to put in some time to see if all is ok.

Thank you!

Narrator: All was ok.

Re: Please log in with router's password

#219
post #2

To the reader: if this is your first exposure to finding things that aren't supposed to be exposed to the internet and you're finding it interesting enough to want to learn more, there's a tool commonly used among security practitioners called Shodan that enables a much more tunable search for exposed assets. https://en.wikipedia.org/wiki/Shodan_(website) - deeper reading. I'm not affiliated. --- It's also a super ba…

There's also a Chinese-made equivalent of Shodan: https://www.zoomeye.org/

Re: Please log in with router's password

#220
post #194

Earlier quoted context omitted.

I use Synology but admittedly have don't have a deep understanding of networking or security. It works for me and is very user friendly.

What Synology products do you use? I was not aware they offered routers.

They do offer a router. It's basically just a Synology NAS with no drives and a few extra routery bits.

https://www.synology.com/en-global/products/RT2600ac

Post reply on HN