lundi 3 octobre 2016

DVRs highly insecure

http://ift.tt/2dWRoJZ

Quote:

Johannes B. Ullrich, a researcher and chief technology officer for the SANS Internet Storm Center, wanted to know just how vulnerable these devices are to remote takeover, so he connected an older DVR to a cable modem Internet connection. What he saw next—a barrage of telnet connection attempts so dizzying it crashed his device—was depressing.

"The sad part is, that I didn't have to wait long," he wrote in a blog post published Monday. "The IP address is hit by telnet attempts pretty much every minute. Instead of having to wait for a long time to see an attack, my problem was that the DVR was often overwhelmed by the attacks, and the telnet server stopped responding. I had to reboot it every few minutes."
Tivos don't have telnet servers do they?

I know they need connectivity to download program guides but it's regrettable that you have to have them online to connect to Tivo servers. We don't know if they're secure.


Aucun commentaire:

Enregistrer un commentaire