O2 Home Broadband – a security update

scoopex · 9 Sep 2009 at 10:55

Just got this email in from 02.

We’ve been told about a security problem that could affect your O2 Wireless Box.

The problem could let people change your router settings, which could change how it works.

What we'll do

We’ll set up a password automatically to protect the settings on your O2 Wireless Box. You don’t need to call us to do anything. You’ll only need it if you want to change the settings. (In most cases, you’ll probably never need it.)

The password will be the 11 digit alphanumeric serial number on the bottom of the O2 Wireless Box. The serial number has an “SN “in front of it e.g. “CP0749JTAM3” and a 2 digit code in brackets after it. Here’s how to change it(If you would like to)

Nothing else changes

We won’t change any other settings on your O2 Wireless Box. (The password you use to connect wirelessly to your O2 Wireless Box will stay the same.)

We apologise for the inconvenience, and we’ll do everything we can to keep the disruption to a minimum.

Kind regards,

O2 Broadband Team

AtreuS · 9 Sep 2009 at 13:06

Ah so thats why i cant log into my box anymore.

Odd that ive not had the email yet.

Im slightly concerned with the fact that they are remotely fiddling with my router, surely i should be consulted first?

marc2003 · 9 Sep 2009 at 13:16

AtreuS said:
Im slightly concerned with the fact that they are remotely fiddling with my router, surely i should be consulted first?

but it's not your router. it's only on loan to you whilst you're a customer.

you can use telnet to delete the admin/system accounts if you want to stop them tampering though.

it would have been nice to have been notified before they did the changes though. i only received the email today but i believe they were changing passwords from last friday onwards.

J.B · 9 Sep 2009 at 13:20

marc2003 said:
you can use telnet to delete the admin/system accounts if you want to stop them tampering though.

Did not know that, might have a play about when I get home.

LEK-89 · 9 Sep 2009 at 14:26

Hhmmm they still have not changed it on mine yet?, well I have not tried mine today I will see if it has changed when I get home later.

Liam

manic_man · 9 Sep 2009 at 15:31

They have done this for all Be customers too, same service and box I suppose.

They sent out three emails in total...

The actual reason is apparantly this, according to the last email sent:

The BE (o2) Box is vulnerable to an XSS (cross-site scripting) combined with a CRSF (cross-site request forgery) that allows a remote attacker to perform actions on the Web UI (user interface), via the use of JavaScript – and without the user’s knowledge or consent.

Locky · 9 Sep 2009 at 17:00

Dont use the o2 router as its crap.

lauy · 9 Sep 2009 at 17:32

Locky said:
Dont use the o2 router as its crap.

didn't think you could use an alternate router with o2 broadband? :confused:

Nymins · 9 Sep 2009 at 18:13

lauy said:
didn't think you could use an alternate router with o2 broadband?

http://www.o2user.co.uk/o2_tutorials/how_to_use_your_own_router_with_o2_broadband.html

Im using a Netgear DG834GT with O2.

AtreuS · 9 Sep 2009 at 18:25

I have DGN2000 but its not playing nice with the 02 service.

All the setting are fine and it does work for a week or so then it slows right down and its like using dial up. Resetting the router has no effect, and swapping back to the o2 one results in normal speeds again.

Im still trying to figure out why. Im currently testing the netgear on my sisters broadband and so far its been fine.

sub7 · 9 Sep 2009 at 20:12

Im using an old netgear dg834g router with no slow down issues

mole90 · 9 Sep 2009 at 21:19

Thanks to o2/Be for letting everyone know about this........no emails to me either - I thought it was just me being stupid when I tried to access my router yesterday!

Dewotter · 11 Sep 2009 at 18:20

What's the username? Admin and Administrator do nothing for me :confused:

Daegan · 11 Sep 2009 at 18:51

RKO said:
What's the username? Admin and Administrator do nothing for me

SuperUser

Scooby_WR1 · 11 Sep 2009 at 19:35

AtreuS said:
I have DGN2000 but its not playing nice with the 02 service.

All the setting are fine and it does work for a week or so then it slows right down and its like using dial up. Resetting the router has no effect, and swapping back to the o2 one results in normal speeds again.

Im still trying to figure out why. Im currently testing the netgear on my sisters broadband and so far its been fine.

Using the DGN2000 here but had no problems at all.
I used this link to configure it dont know if it will help.
http://www.o2user.co.uk/forum/o2-broadband-tutorial-section/673-how-use-your-own-router-o2-broadband.html

LEK-89 · 11 Sep 2009 at 19:58

Just noticed today also before I switched to my new Netgear DGN2000 that they have done the security update to our O2 Wireless Box II router too.

Liam

meghatronic · 11 Sep 2009 at 20:04

I'm concerned. My O2 box behaves like a Be box, and I'm on O2. Will mine still be updated?