Bash Bug

[Workingman]

For those of you who would like to protect your router(s) here is a simple method.

Open a new blank tab in your browser. In the address bar type in 192.168.1.1 and press Enter. On typical systems you will be presented with a login window. If it has not been changed the username will be admin, and so will the password; fill them in then hit OK/Enter.

You are now in your router configuration pages. The first pages are a synopsis of your router's performance and settings and are information only. To change things you will need to go to the Advanced tab. The new pages are where you can change things and they are open to you, or anybody else, because of the username/password pair of admin/admin you used in the login screen.

To make things so that strangers cannot access your router you need to go to Maintenance and change the Username and Password pair to something of your choice. Note: on some systems the username cannot be changed. Your password should be at least 8 characters long and a mix of upper/lower case letters and numbers, for example: H0td0gandch1ps (Hotdog and chips without the spaces) - write yours down somewhere - do it NOW. When you have changed the password you will need to Add/apply or OK it and reboot the router. When the router has rebooted you should logout and close the browser tab.

Shut down and restart your browser and open a blank tab. In the address bar type in 192.168.1.1 and press Enter. this time the login page will require the new username and password pair. If the browser asks to save the details tell it No. Done!

How did I know your router address was 192.168.1.1 and your login details were 'admin' 'admin'? I'd have to kill you if I told you.

[Suff]

Many routers have a small white sticker on them, either on the back or on the bottom. It usually tells you the default ip address and the username and password.

Top candidates are

User: Admin or admin
Password: Admin admin password blank.

Sometimes if you go to the control panel->hardware->Devices the router will be on the top line. Not always though it depends on what the router supports...

I was reading that Apple have stated that their Macs are "secure". No problem, they are safe from "Remote" attacks. Great job done then. But what if someone has managed to get into wordpress and added malicious code which your browser will execute locally???? Ah we'll that's never happened has it?

It's one thing trying to be positive in the face of potential issues. But this is simply irresponsible. Remote is only the first and easiest way in. There are zillions of others.... As I said to the Mac users on the independent thread.... SUDO does not require a password and it's a command which can easily be executed by the bash bug. So then a Mac is wide open.....

The only protection is a patch from Apple plus security software and extreme vigilance.

[Workingman]

Oh poo, I forgot the upper case A in Admin and the blank password, but the message remains the same.

[Suff]

Amongst the lot I have, one requires A.... Most annoying..

[Workingman]

One of mine (TalkTalk) won't allow me to change the username and, yes, it is one of the ' A' or 'a' words; bugs the hell out of me as half my username/password pair is already known. The trouble is that I have to use it to make the TV smart-box work.

I tried an old Netgear but it will not allow me to connect to TalkTalk smart TV services.

[Suff]

Yes kind of irritating like my Livebox from Orange. root is the superuser but I can't get the password and I can't change the admin user from admin....

Orange also do the same thing with the live TV. So do Belgacom. Far as I can work out it's due to hard coded TV network addresses and a separate VLan on the box.

On a side note, seems that Lookout is the best bet for securing an iPad/Phone. Symantec don't do the full service. I spent a frustrating hour or more today trying to get Lookout. Mrs S has forgotten her iTunes and Apple Store passwords. She only knows the iCloud one. <sigh>. My temper not being helped by the fact that I spent Saturday re piping the stove to one of the old cast iron radiators which I had to place in the new Living room. The ceilings in the garage and front hall next door are 4M. I'm sore...