Re: [PLUG] How to confirm my router is safe

On 04/24/2018 09:32 PM, Russell Senior wrote: President Obama and a kid are sitting at a school cafeteria lunch table. Kid says: "My dad says you are spying on all of us"; Obama says: "He's not your father." They got me the day I forgot to put on my tin foil hat. -- Regards, Dick Steffens

Re: [PLUG] How to confirm my router is safe

President Obama and a kid are sitting at a school cafeteria lunch table. Kid says: "My dad says you are spying on all of us"; Obama says: "He's not your father." On Tue, Apr 24, 2018 at 9:28 PM, Dick Steffens wrote: > On 04/24/2018 05:07 PM, Ben Koenig wrote: > >>

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 08:14 PM, Larry Brigman wrote: The second piece that I saw was to turn off upnp protocol. Akamai(sp?) has a white paper about it and a list affected routers. I'll check that out. Thanks to all folks who responded to my question. I learned a few things, but am grateful earlier

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 05:07 PM, Ben Koenig wrote: https://www.opb.org/news/article/npr-sounding-the-alarm- about-a-new-russian-cyber-threat/ <...> Dear God. You just linked to an HTTPS website that contains insecure content. I examined the source code for that web page, and nearly drowned in the

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 03:21 PM, Louis Kowolowski wrote: I'd also run by https://www.grc.com/x/ne.dll?bh0bkyd2 and make sure it doesn't find anything. It passed the File Sharing test. On the Common Ports test all are either labeled as Stealth or Closed. Also,

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 03:16 PM, Russell Senior wrote: https://www.us-cert.gov/ncas/alerts/TA18-106A There is some discussion of SOHO routers but none of the vulnerabilities mentioned apply to you. They mention: Telnet (typically Transmission Control Protocol (TCP) port 23, but traffic can be

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 02:38 PM, Russell Senior wrote: The NPR story is mostly regurgitated press release from scare mongers. Not surprising. The network infrastructure it looks like they are talking about is in the core of the internet, big cisco and juniper routers and the like. If anything, the

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 02:27 PM, Russell Senior wrote: Attitude Adjustment is pretty old. OpenWrt has a pretty good firewall by default, so remote access should be difficult. You should take note of which packages you have installed, Nothing beyond the default. backup your settings, and then you

Re: [PLUG] How to confirm my router is safe

On 04/24/2018 02:26 PM, Rich Shepard wrote: Brian Krebs had a blog post on this a while ago. The key thing to do -- unless I'm badly mistaken -- is to change the admin's password from the factory default. That one I knew about when I got the router, and it has a password only I know. And it

Re: [PLUG] How to confirm my router is safe

The second piece that I saw was to turn off upnp protocol. Akamai(sp?) has a white paper about it and a list affected routers. On Tue, Apr 24, 2018, 5:07 PM Ben Koenig wrote: > > https://www.opb.org/news/article/npr-sounding-the-alarm- > > about-a-new-russian-cyber-threat/

Re: [PLUG] How to confirm my router is safe

> https://www.opb.org/news/article/npr-sounding-the-alarm- > about-a-new-russian-cyber-threat/ > > It recommends following your router manufacturer's guidance on making sure > the router is secure. It doesn't say specifically what to search for. I > have a Buffalo WZR-600DHP running OpenWrt LuCI,

Re: [PLUG] How to confirm my router is safe

On Apr 24, 2018, at 4:26 PM, Rich Shepard wrote: > > On Tue, 24 Apr 2018, Dick Steffens wrote: > >> OPB has an article about router vulnerability. >> https://www.opb.org/news/article/npr-sounding-the-alarm-about-a-new-russian-cyber-threat/ >> >> It recommends

Re: [PLUG] How to confirm my router is safe

https://www.us-cert.gov/ncas/alerts/TA18-106A There is some discussion of SOHO routers but none of the vulnerabilities mentioned apply to you. They mention: Telnet (typically Transmission Control Protocol (TCP) port 23, but traffic can be directed to a wide range of TCP ports such as 80,

Re: [PLUG] How to confirm my router is safe

The NPR story is mostly regurgitated press release from scare mongers. The network infrastructure it looks like they are talking about is in the core of the internet, big cisco and juniper routers and the like. If anything, the NSA noticed because their surveillance tools are already embedded in

Re: [PLUG] How to confirm my router is safe

Attitude Adjustment is pretty old. OpenWrt has a pretty good firewall by default, so remote access should be difficult. You should take note of which packages you have installed, backup your settings, and then you could try installing this, the most recent release version:

Re: [PLUG] How to confirm my router is safe

On Tue, 24 Apr 2018, Dick Steffens wrote: OPB has an article about router vulnerability. https://www.opb.org/news/article/npr-sounding-the-alarm-about-a-new-russian-cyber-threat/ It recommends following your router manufacturer's guidance on making sure the router is secure. It doesn't say

[PLUG] May PLUG Ideas?

Hello all, Anyone itching to give a talk at the 1st Thursday PLUG meeting? I could give this one from LFNW if you like: https://www.linuxfestnorthwest.org/conferences/lfnw18/program/proposals/105 Or we have an "UnPLUG" open discussion... Michael Dexter PLUG Volunteer

[PLUG] How to confirm my router is safe

OPB has an article about router vulnerability. https://www.opb.org/news/article/npr-sounding-the-alarm-about-a-new-russian-cyber-threat/ It recommends following your router manufacturer's guidance on making sure the router is secure. It doesn't say specifically what to search for. I have a