Newsletter Archives

  • Horowitz: New modem security is a disgrace

    AskWoody_MVP @Michael432 tweeted last week:

    Someone I know just got a new #router and modem from Spectrum. Security was a disgrace. Default router userid/password was not changed. #UPnP enabled. #WPS enabled. You are on your own. I can help at http://RouterSecurity.org

    Martin Boissonneault responded:

    UPnP is not evil. If it is not available from the WAN side, it’s acceptable in a residential setting. I use it myself in the form of UPnP2 (from memory). I blocked usage of some ports, but it is more convenient. Of course, I _know_ every device attached.

    As for WPS, well, I don’t and won’t enable that. Ubiquiti’s AP does not even offer it. Since WPS is vulnerable over Wi-Fi, that should be default off. But if they think in terms of support costs, they will turn it on as well as UPnP…

    Costs vs accountability!

    And Michael again:

    Bingo! WPS and UPnP are enabled by default to decrease support costs. Fewer phone calls. There are multiple flavors of WPS, some routers let you chose which flavors to use. One type is perfectly secure.

    Care to join the discussion?