The backdoor binary is still present in the new firmware version, he says, and the backdoor on port 32764 can be "opened" again by sending a specific network packet to the router.
He proved the matter by publishing PoC exploit code - based on earlier code created by Wilmer van der Gaast - which delivers an MD5 hash of the router’s model number.
it certainly leaves one thinking, ---doesn't it? I have often compared the war against hacking to the world's worst game of Whac-a-Molekenetics wrote:One has to wonder what the intentions are for including this backdoor.
I have cable instead of DSL and use the Linux-based dd-wrt firmware for my wireless router. I don't suppose DSL users have any alternative to their router company's firmware.
maybe i should get me a batting helmet and line it with tinfoil.Why this should have surprised anyone is hard to understand. Problems with Dual_EC_DRBG were first reported almost eight years ago and in 2007 Dan Shumow and Niels Ferguson of Microsoft showed, as Bruce Schneier put it at the time, "...the algorithm contains a weakness that can only be described a backdoor."
