Technology

59569 readers

3431 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

431

DOJ quietly removed Russian malware from routers in US homes and businesses (arstechnica.com)

submitted 9 months ago by issue0315@lemmy.world to c/technology@lemmy.world

50 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] EncryptKeeper@lemmy.world 7 points 9 months ago* (last edited 9 months ago) (1 children)

I can’t think of a single ISP that was using old Ubiquiti EdgeOS routers as consumer routers.

[–] 520@kbin.social 2 points 9 months ago* (last edited 9 months ago) (1 children)

So if we're not talking about ISPs sending this out, then the reason that remote access gets turned on by default is incase the company sysadmin couldn't physically get to the device, and they assumed the company had a firewall.

Companies almost always prioritise OOTB setup and operationality over security when it comes to defaults.

[–] EncryptKeeper@lemmy.world 1 points 9 months ago* (last edited 9 months ago)

They likely weren’t enabled by default at all. Because that’s generally not how company IT departments even remote manage these things. And the affected devices are the firewalls.

Remote administration was turned on manually, by the owners of these devices, because they didn’t know what they were doing.