| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
 |
World Community Grid Forums
Category: Community
Forum: Chat Room
Thread: Are you aware of the security flaw in Universal Plug & Play (UPnP)? |
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 5
|
|
| Author |
|
|
twilyth
Master Cruncher US Joined: Mar 30, 2007 Post Count: 2130 Status: Offline Project Badges: 
|
I'm not completely sure I understand what's up with this so I just turned UPnP off on my router, but this looks like some scary stuff, no?
----------------------------------------A Security Flaw in Universal Plug & Play (UPnP) are exposing more than 50 millions of computers, printers and storage drives to attack by hackers remotely. Rapid7 said Tuesday in a research paper, that problem lies in routers and other networking equipment that use a commonly employed standard known as Universal Plug and Play or UPnP. UPnP allows networked devices to discover each other and automatically establish working configurations that enable data sharing, media streaming, media playback control and other services. In one common scenario a file-sharing application running on a computer can tell a router via UPnP to open a specific port and map it to the computer's local network address in order to open its file-sharing service to Internet users. More at link   |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
And then the credentials of this gentleman who runs the show, with my emphasis
Mohit Kumar aka 'Unix Root' is Founder and Editor-in-chief of 'The Hacker News'. He is a Security Researcher and Analyst, with experience in various aspects of Information Security. Other than this : He is an Internet Activist, Strong supporter of Anonymous & Wikileaks. |
||
|
|
twilyth
Master Cruncher US Joined: Mar 30, 2007 Post Count: 2130 Status: Offline Project Badges:
|
Yeah, sorry about that but the original article was from New Scientist so i couldn't link to that since most people don't have a subscription, so I had to dig up something else.
----------------------------------------Anyway, there is a link to the Rapid 7 report in the article if you go back and check and they ARE in fact legit. [Edit 2 times, last edit by twilyth at Mar 19, 2013 9:18:19 AM] |
||
|
|
Sabrina Tarson
Advanced Cruncher United States Joined: Jun 27, 2012 Post Count: 149 Status: Offline Project Badges: 
|
You can also use Steve Gibson's ShieldsUP! to detect if your router is one of those affected.
----------------------------------------https://www.grc.com/x/ne.dll?bh0bkyd2 |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Now that's an old and faithful, used for many years:
THE EQUIPMENT AT THE TARGET IP ADDRESS DID NOT RESPOND TO OUR UPnP PROBES! (That's good news!) Their open/closed port scanning is excellent and fast. |
||
|
|
|