Technology

59589 readers

2891 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

115

Hacking Millions of Modems (and Investigating Who Hacked My Modem) (samcurry.net)

submitted 5 months ago* (last edited 5 months ago) by moira@femboys.bar to c/technology@lemmy.world

9 comments fedilink hide all child comments

This article is a great example why you should use your own router instead of ISP provided one

you are viewing a single comment's thread
view the rest of the comments

[–] gravitas_deficiency@sh.itjust.works 4 points 5 months ago

lol holy shit

…

The only thing in the above parameter that was valid was the device serial number. If this request worked, it meant that I could use an “encryptedValue” parameter in the API that didn’t have to have a matching account ID.

I sent the request and saw the exact same HTTP response as above! This confirmed that we didn’t need any extra parameters, we could just query any hardware device arbitrarily by just knowing the MAC address (something that we could retrieve by querying a customer by name, fetching their account UUID, then fetching all of their connected devices via their UUID). We now had essentially a full kill chain.

…

And then he proceeds to make arbitrary changes to his own modem via this exploit as a final proof. Jesus tapdancing christ.