Wazua
»
Market
»
Technical
»
Unprofessional ISPs
Rank: New-farer Joined: 1/3/2015 Posts: 86 Location: Bomet
|
geofreygachie wrote: Anyway with one having access to you router ,traffic(think all credentials, business emails and conversation) can be redirected to a rogue DNS server and within no time your email account is not accessible you pc is infected with a keylogger that notes every stroke of the keyboard.Endless possibilities.
Come on now, its much easier to securely configure your computer than the network. Will you configure the network when reading mail on public wifi? What about when you need to access financial services? Networks as they exist currently are insecure by default.
|
|
|
Rank: Elder Joined: 10/23/2008 Posts: 3,966
|
geofreygachie wrote:Jus Blazin wrote:I am trying to understand what you are talking about. Your posts are very vague. What do you mean unprofessional ISP? What if I gave you my IP address and you exploited me? Please post your claims/suspicions here in non-IT English please. That way, many Zuku users will understand what you are on. For a long time now Zuku and their sub contractors(e.g Kenyacam) have been setting up clients and not advising them on how to secure their(clients) network i.e by setting up SSID or WIFI security.Some clients have managed to change this SSID or WIFI to suit them and more secure.This however is just one part of basic security.Most of the routers have an option for remote access meaning that if i have the IP address assigned by Zuku i can go ahead and access the device from any location since most of them have the default username and password its quite easy to login.This backdoor access mostly affects Cisco EPC2425 router/gateway for those on the old Zuku network and Huawei HG8245 which are being used on the new Fiber network. By someone having access to your router, a number of things can happen e.g change the DNS server in a way that all you traffic will go through a specific server and hence information from you router can be harvested this includes you logins and passwords and this is for everyone connected to the router. Or petty people would change the password to your router and wifi locking you out though a router reset would resolve this. I have contacted Zuku regarding this problem of default credentials but they have not responded.I have so far been able to test and verify my claim with close to fifty routers on Zuku network specifically Huawei HG8245.I am however sceptical on displaying someone's IP address because i dont have control of what will happen after that.I am posting this to help resolve this and not to be a source of pain and misery. So if I'm able to change my SSID and password, which anyone can through the browser through website 192.168.0.1 (which I found out through google with username: admin, password: password), does that mean I'm more secure than those with default credentials? Coz this IT world is a jargon to be precise. Most of us may not understand the underlying. Luck is when Preparation meets Opportunity. ~ Lucius Annaeus Seneca
|
|
|
Rank: Veteran Joined: 11/11/2006 Posts: 972 Location: Home
|
Let me call you bluff. Here we go. I got Zuku Fibre, my router is pretty old, actually, a Cisco EPC2425. Well, send me mail on holycowazua@gmail.com so that i can give you my IP address. Just a quick one, which IP do you need? I seem to have different ones. The one from "whats my IP" is in the range of 154.70.xxx.xxx while the one from router DHCP is 10.224.xxx.xxx.
|
|
|
Rank: Elder Joined: 12/17/2009 Posts: 3,583 Location: Kenya
|
geofreygachie wrote:nakujua wrote:I think the isp know what you term as an exploit, but whats the worst that can happen to a user who happens to have the default credentials on the router ? mimi sioni cause for alarm, its like standing on the road hapo athi river pulling out a pair of binoculars then looking through them and you see that gated estate hapo and then claiming you have found a security exploit, since a thief can do the same. What if using the binoculars you note that the gate and main door to House No X has a faulty padlock which is pulled to unlock and pushed to lock just that.Tafakari hayo.Endless possibilities. Anyway with one having access to you router ,traffic(think all credentials, business emails and conversation) can be redirected to a rogue DNS server and within no time your email account is not accessible you pc is infected with a keylogger that notes every stroke of the keyboard.Endless possibilities. My point is it's not necessary, trying to secure the road. no way a keylogger can be installed via a router, and unless your business mail is run by a crook - I would expect the minimum for the tunnel to be encrypted.
|
|
|
Rank: Elder Joined: 12/17/2009 Posts: 3,583 Location: Kenya
|
kalenjinherdsboy wrote:geofreygachie wrote: Anyway with one having access to you router ,traffic(think all credentials, business emails and conversation) can be redirected to a rogue DNS server and within no time your email account is not accessible you pc is infected with a keylogger that notes every stroke of the keyboard.Endless possibilities.
Come on now, its much easier to securely configure your computer than the network. Will you configure the network when reading mail on public wifi? What about when you need to access financial services? Networks as they exist currently are insecure by default. Huyu jama anabeba watu aje, just wants to alarm guys - ati install keylogger via a router.
|
|
|
Rank: Elder Joined: 12/17/2009 Posts: 3,583 Location: Kenya
|
holycow wrote:Let me call you bluff. Here we go. I got Zuku Fibre, my router is pretty old, actually, a Cisco EPC2425. Well, send me mail on holycowazua@gmail.com so that i can give you my IP address. Just a quick one, which IP do you need? I seem to have different ones. The one from "whats my IP" is in the range of 154.70.xxx.xxx while the one from router DHCP is 10.224.xxx.xxx. I think he needs the 154.70... one
|
|
|
Rank: Veteran Joined: 11/11/2006 Posts: 972 Location: Home
|
This guy has a point, those on Zuku, better take him serious. Well, I'll furnish him all the details when i get home to complete the test. So far, what he has shared with me is scary. This guy knows his stuff.
|
|
|
Rank: Elder Joined: 12/17/2009 Posts: 3,583 Location: Kenya
|
holycow wrote:This guy has a point, those on Zuku, better take him serious. Well, I'll furnish him all the details when i get home to complete the test. So far, what he has shared with me is scary. This guy knows his stuff. if you are not comfortable sharing the details he gave you hapa, just make sure you cross check the info with 1 or 2 more IT guys before committing - he might be luring you into a trap. lakini if the alarm is for what he mentioned i.e installing a keylogger or getting your email password - do not worry that will not happen through your router - you can change the credentials to feel safe. lakini if he is asking for more details - please keep off, unless you know him/her.
|
|
|
Rank: Veteran Joined: 11/11/2006 Posts: 972 Location: Home
|
nakujua wrote:holycow wrote:This guy has a point, those on Zuku, better take him serious. Well, I'll furnish him all the details when i get home to complete the test. So far, what he has shared with me is scary. This guy knows his stuff. if you are not comfortable sharing the details he gave you hapa, just make sure you cross check the info with 1 or 2 more IT guys before committing - he might be luring you into a trap. Nope, he shared the idea with me. I have put it to test on other innocent Kenyans( i did not tamper with anyone, just peeped and left). Lets just say, the techies at Zuku are very very careless or assuming a lot.
|
|
|
Rank: Member Joined: 8/16/2012 Posts: 661
|
Information is always available online surely. If one decides to do a research on their own it might end up a successful business opportunity. But to raise alarm may not be that necessary. e.g going by the already public info [ already post here ] Zukus block ips available here can be penetration tested by anyone. Remember though: socallinuxexpo.org wrote:While it is fun to learn how to hack, sometimes it's tough to practice your skills without breaking any laws. It turns out if you have any consumer devices on your local network, you already have everything you need to practice penetration testing... Live and learn; and don’t forget, nothing ventured, nothing gained.
|
|
|
Wazua
»
Market
»
Technical
»
Unprofessional ISPs
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.
|