BT, Sky, Talktalk Warning

Johnnytoxic · 9 Mar 2014 at 20:29

Although the chances are slim of it happening to you, be assured that the default passwords on these routers are easily brute forcible now.

If you have not changed it yet, I recommend you do so.

GuruJockStrap · 9 Mar 2014 at 23:36

Wi-Fi password, router admin password or both?

MissChief · 10 Mar 2014 at 00:31

All Sky Routers have the same password but surely you can only access the Router once connected to it? Which requires the WPA/WPA2 key? I thought WPA was fairly secure and WPA2 very?

copycatuk · 10 Mar 2014 at 00:36

MissChief said:
All Sky Routers have the same password but surely you can only access the Router once connected to it? Which requires the WPA/WPA2 key? I thought WPA was fairly secure and WPA2 very?

He may mean the wifi password can be brute forced.

Subliminal Aura · 10 Mar 2014 at 00:45

Zzzzzzzzzzz.... //ignore

MissChief · 10 Mar 2014 at 02:36

New Sky Routers, as an example, use WPA2. Turn off WPS and I believe it would take a concerted effort to break it. From a quick Google a Hacker would need to be in the vicinity of your network when you connect a device, take the information (which doesn't actually include the network key as the transmission is still encrypted when a device is connecting) and then try and use a Brute Force attack. Sure he already has some info if he knows about Sky Routers (eight capitals, no numbers) which I'd actually like Sky to increase and to include some numbers, maybe move to 12 characters and add 4 numbers in there. I'd imagine eight random letters wouldn't actually take that long but it's like most things. An opportune Wi-Fi user just looking for free Wi-Fi is likely to find an open network within a few hundred yards of your house although that number is diminishing. Much like if they want your car specifically they'll find a way. If they want access to your Wi-Fi specifically they will also find a way.

Subliminal Aura · 10 Mar 2014 at 08:46

MissChief said:
New Sky iconic you walk rs, as an example, use WPA2. Turn off WPS and I believe it would take a concerted effort to break it. From a quick Google a Hacker would need to be in the vicinity of your network when you connect a device, take the information (which doesn't actually include the network key as the transmission is still encrypted when a device is connecting) and then try and use a Brute Force attack. Sure he already has some info if he knows about Sky Routers (eight capitals, no numbers) which I'd actually like Sky to increase and to include some numbers, maybe move to 12 characters and add 4 numbers in there. I'd imagine eight random letters wouldn't actually take that long but it's like most things. An opportune Wi-Fi user just looking for free Wi-Fi is likely to find an open network within a few hundred yards of your house although that number is diminishing. Much like if they want your car specifically they'll find a way. If they want access to your Wi-Fi specifically they will also find a way.

LOL you're just trying to confide in yourself and your supposed security level.

I stand by what I said previously, if you want to give me permission to break your wpa2 noobness I will be happy to do so and install a honeypot for no extra charge

KIA · 10 Mar 2014 at 09:48

Johnnytoxic said:
Although the chances are slim of it happening to you, be assured that the default passwords on these routers are easily brute forcible now.

If you have not changed it yet, I recommend you do so.

Where's the evidence?
Where's the detailed explanation?

Psycho Sonny · 10 Mar 2014 at 11:30

Subliminal Aura said:
LOL you're just trying to confide in yourself and your supposed security level.

I stand by what I said previously, if you want to give me permission to break your wpa2 noobness I will be happy to do so and install a honeypot for no extra charge

could you tell us all how to install a honeypot for free?

or link us to a simple guide?

Subliminal Aura · 10 Mar 2014 at 12:30

Psycho Sonny said:
could you tell us all how to install a honeypot for free?

or link us to a simple guide?

Not sure if serious :confused:

Just Google it mate

bemaniac · 10 Mar 2014 at 12:47

I changed it anyway...

Johnnytoxic · 10 Mar 2014 at 22:51

The WPA password.

8 characters uppercase OR lowercase
BT and TalkTalk also vulnerable

Just two 7970's churning out 160,000 keys per second each could brute force one in 8 days.

Just a heads up to be aware. With GPU power also increasing these times will get shorter and shorter. Most people don't tend to change the default password.

MrMarvelous · 10 Mar 2014 at 23:18

I'm on TalkTalk but don't use their supplied router, I should be O.K right? There's currently no password on mine, it asks you for a password but you just click submit and it logs you in.

Johnnytoxic · 11 Mar 2014 at 00:11

MrMarvelous said:
I'm on TalkTalk but don't use their supplied router, I should be O.K right? There's currently no password on mine, it asks you for a password but you just click submit and it logs you in.

Your on about the Admin password.

I'm on about the WPA wireless key.

MissChief · 11 Mar 2014 at 00:54

Johnnytoxic said:
The WPA password.

8 characters uppercase OR lowercase
BT and TalkTalk also vulnerable

Just two 7970's churning out 160,000 keys per second each could brute force one in 8 days.

Just a heads up to be aware. With GPU power also increasing these times will get shorter and shorter. Most people don't tend to change the default password.

Like I said, if someone wants access to your wireless network specifically they will find a way. Same way if they wanted your car specifically they'll find a way. I find it unlikely that some 'script kiddie' will be happy to spend £500 on graphics cards and spend potentially days trying to crack a WPA2 key when there is likely to be someone using a WEP key which is crackable in seconds in the vicinity. Realism people, not paranoia.

MagicBoy · 11 Mar 2014 at 01:34

Subliminal Aura said:
Just Google it mate

Lamest comeback ever.

Johnnytoxic said:
The WPA password.

8 characters uppercase OR lowercase
BT and TalkTalk also vulnerable

Just two 7970's churning out 160,000 keys per second each could brute force one in 8 days.

Just a heads up to be aware. With GPU power also increasing these times will get shorter and shorter. Most people don't tend to change the default password.

Far easier to get the MAC address of aforementioned Sky router, then feed it into the algorithm that creates the default password in the first place (unless it's an SR101 for the moment).

MissChief said:
Like I said, if someone wants access to your wireless network specifically they will find a way. Same way if they wanted your car specifically they'll find a way. I find it unlikely that some 'script kiddie' will be happy to spend £500 on graphics cards and spend potentially days trying to crack a WPA2 key when there is likely to be someone using a WEP key which is crackable in seconds in the vicinity. Realism people, not paranoia.

Couldn't agree more.

tribz · 11 Mar 2014 at 08:19

I think its generally good advice to change your routers admin password if its possible to do it.

Whilst not directly applying to Sky / BE / TalkTalk, I noticed this yesterday ..

http://www.theregister.co.uk/2014/03/10/virgin_media_router_snafu/

and theres been other reports of WiFi router worms etc.

It seems obvious that routers are targets now.

Roady · 17 Mar 2014 at 13:31

MissChief said:
Like I said, if someone wants access to your wireless network specifically they will find a way. Same way if they wanted your car specifically they'll find a way. I find it unlikely that some 'script kiddie' will be happy to spend £500 on graphics cards and spend potentially days trying to crack a WPA2 key when there is likely to be someone using a WEP key which is crackable in seconds in the vicinity. Realism people, not paranoia.

Pretty sure there are services out there that these people use which do the brute force for them, providing they can supply the hash...

Password padding all the way!