Technology

59534 readers

3195 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

254

Chinese malware removed from SOHO routers after FBI issues covert commands (arstechnica.com)

submitted 9 months ago by throws_lemy@lemmy.nz to c/technology@lemmy.world

51 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] BakedCatboy@lemmy.ml 20 points 9 months ago* (last edited 9 months ago) (2 children)

Your ISP knows the Mac address of your router since it requests a public IP from them using DHCP. That's why if you contact support they usually can confirm the brand of your router by doing an oui lookup.

In theory the FBI could have collected a list of MACs and optionally used an ASN lookup on the public IP and then handed each ISP their list of MACs, which the ISP could associate back to customers to contact. It would only not work for customers who spoof their router WANs ethernet mac.

But I think just patching it is a normal and fine solution imo.

[–] Tangent5280@lemmy.world 2 points 9 months ago (1 children)

Do you work in networking? How did you learn the magicks of the computer tongue?

[–] BakedCatboy@lemmy.ml 2 points 9 months ago* (last edited 9 months ago)

I only do web development, but my networking knowledge mostly comes from being the designated person to call the ISP for tech support and being in charge of setting up the WiFi in every place that I've lived, in addition to participating and running community scale mesh wifi tech meetups for many years (think NYCMesh except just 4 guys who never accomplished much aside from buying and flashing lots of routers with openwrt lmao)

I also ran 12Us of homelab for a few years in my basement, which was powered by an overkill fiber to the home setup (courtesy of tricking Comcast into undercharging me for gigabit pro) that necessitated a 10G switch and firewall.

[–] Case@lemmynsfw.com 1 points 5 months ago

Or I mean, Shodan exists. I'm sure the gov has better.

A theoretical botnet I was looking at on github used shodan to identify possible targets to infect.