Router Security Threat

**Viktor_Olin** · 01-13-12, 05:17 PM

An interesting security hole has been discovered in many common wireless routers. If your router supports WPS (and most newer routers do), WPS should be disabled. Some routers, however, remain vulnerable even after WPS has been "disabled" in the GUI (Linksys, e.g.).

Hands-on: hacking WiFi Protected Setup with Reaver

Here's a list someone has started with vulnerable routers (not inclusive):
https://docs.google.com/spreadsheet/...FpEUDNSSHZEN3c

**Guyver** · 01-13-12, 05:22 PM

Mine isn't on the list.

**Viktor_Olin** · 01-13-12, 06:15 PM

I would advise, at a minimum, checking for the 8 digit PIN on a sticker on your router. If there is such a PIN, your router is very likely vulnerable. I also suggest checking in the router's GUI for the ability to disable WPS.

I believe (hope) my router is too old to have WPS.

**rush2049** · 01-13-12, 11:06 PM

The article said that turning it off doesn't work....

too bad i live in the boonies where even the road in front of my house is too far to get a signal.

**Gumby** · 01-14-12, 04:17 AM

My router is on the list, but I upgraded it to DD-WRT almost as soon as it was out of the box. I just went through every menu on it and could find no setting for WPS so I am probably OK. More research is required though.

EDIT: Upon further review, the latest stable release of DD-WRT, V24 SP1, does not support WPS in any way shape or form. However, the current develop release, V24 SP2, does support it. So if you are using DD-WRT, Dont use the dev version. I was on SP1 so I am all good. No need to upgrade anyway. If it ain't broke, don't fix it.

**RhysJD3** · 01-14-12, 12:35 PM

Yeah. Mine is in the list. Sigh.

However, I can always use this to explain I why there's so much porn downloaded off my internet.

I was hacked! Someone else downloaded it all!

**WileECyte** · 01-14-12, 12:40 PM

Originally Posted by RhysJD3

Yeah. Mine is in the list. Sigh.

However, I can always use this to explain I why there's so much porn downloaded off my internet.

I was hacked! Someone else downloaded it all!

Won't necessarily hold up in court. You're liable for not properly securing your network.

**Gumby** · 01-14-12, 01:37 PM

Originally Posted by RhysJD3

Yeah. Mine is in the list. Sigh.

However, I can always use this to explain I why there's so much porn downloaded off my internet.

I was hacked! Someone else downloaded it all!

Does your router support DD-WRT? www.dd-wrt.com | Unleash Your Router
If so, upgrading to DD-WRT should solve this vulnerability. Plus it has the added bonus of giving your $100 router $500 functionality.

**Viktor_Olin** · 01-14-12, 03:12 PM

I've been sorely tempted on numerous occasions to install DD-WRT. This is just another reason to do so. My only reservation is the remote chance of bricking a perfectly functioning router.