Virgin Media Super Hub 2 hack

[JakeNTech]

So, I found this on the BBC web page this morning and though it was worth sharing, http://www.bbc.co.uk/news/uk-40371373. People that have a Super hub 2 are at risk of someone accessing devices on the network, but mainly smart appliances.

Quote

An investigation by Which? found that hackers could access the provider's Super Hub 2 router, allowing access to users' smart appliances.

A child's toy and domestic CCTV cameras were among the vulnerable devices.

Virgin Media said the risk was small but advised customers using default network and router passwords to update them immediately.

Advice that Virgin are giving out is for people to change the WIFI names, WIFI passwords and the password to get in to the web interface, more information here(The instructions online have gone).I hate the super hub two, its web gooey is clunky, its unreliable and has a bad signal range, that will teach me to use the ISP provided box.  

[GzeroD]

Post was moved to General Discussion for not meeting the requirements of the Tech News and Reviews section. available here:

If you bring the post back inline with the requirements above I or another moderator can move it back on request.

 

[JakeNTech]

1 minute ago, GzeroD said:

Post was moved to General Discussion for not meeting the requirements of the Tech News and Reviews section. available here:

If you bring the post back inline with the requirements above I or another moderator can move it back on request.

 

Any better?

[C2dan88]

2 hours ago, fixitnow said:

Only one way to fix this is to change your passwords through the web interface

As long as you are not using the original username/password then you are fine

[GzeroD]

Generally you should include a quote or 2 from the article to give people an understanding of what it is and why it is interesting/important. This is especially important when you don't describe the content in your own words.

In the tech news and reviews section A person should be able to read your OP and have a good idea about the topic and some of it's major details; they should be able to tie your post to something specific so they can comment on it without necessarily reading the source if they are already informed on the topic.

[JakeNTech]

6 minutes ago, GzeroD said:

Generally you should include a quote or 2 from the article to give people an understanding of what it is and why it is interesting/important. This is especially important when you don't describe the content in your own words.

In the tech news and reviews section A person should be able to read your OP and have a good idea about the topic and some of it's major details; they should be able to tie your post to something specific so they can comment on it without necessarily reading the source if they are already informed on the topic.

Ah, ok. I just posted in the same way I did last time, don't normally bother with this/that section of the forum, just saw it on the bbc and thought it was interesting, and wanted to share it as it is a major flaw,lol. Will remember this for next time I post into the news forum, thanks for explaining it!

[Falconevo]

Change pass on it, then put it in modem mode and use something that is actually secure.  Pretty obvious they can be nuked with the default creds are; admin / changeme

[JakeNTech]

2 minutes ago, Falconevo said:

Change pass on it, then put it in modem mode and use something that is actually secure.  Pretty obvious they can be nuked with the default creds are; admin / changeme

To get onto the User interface I assume you have to be on the network, assuming most passwords for wifi are the same/only a few different defaults. 

[Ezzy-525]

2 minutes ago, fixitnow said:

To get onto the User interface I assume you have to be on the network, assuming most passwords for wifi are the same/only a few different defaults. 

You do, but it's not hard for someone to park outside your house and login. That being said...the WiFi on the SuperHub2 is shite, so they'd practically have to be stood in your house anyway! 

 

Moral of the story - Always change passwords from the default whenever you get some new tech.

[JakeNTech]

Just now, Ezzy-525 said:

You do, but it's not hard for someone to park outside your house and login. That being said...the WiFi on the SuperHub2 is shite, so they'd practically have to be stood in your house anyway! 

 

Moral of the story - Always change passwords from the default whenever you get some new tech.

 I bet its still better then Talk Talk

[Falconevo]

7 minutes ago, fixitnow said:

To get onto the User interface I assume you have to be on the network, assuming most passwords for wifi are the same/only a few different defaults. 

Modem mode removes all of its wifi and lan functionality aside from 1 single lan port which your router will be plugged in to.  Completely mitigating this 'hack'

[JakeNTech]

Just now, Falconevo said:

Modem mode removes all of its wifi and lan functionality aside from 1 single lan port which your router will be plugged in to.  Completely mitigating this 'hack'

The joke that me and some of my mates have is just to unplug yourself from the internet, can't be hacked then. I will ask Virgin for a hub three now lol. Cant afford proper networking gear. 

[Falconevo]

1 minute ago, fixitnow said:

The joke that me and some of my mates have is just to unplug yourself from the internet, can't be hacked then. I will ask Virgin for a hub three now lol. Cant afford proper networking gear. 

I recommend the SH3 anyway, it functions far better even in modem mode its less prone to random latency spikes.

[JakeNTech]

Just now, Falconevo said:

I recommend the SH3 anyway, it functions far better even in modem mode its less prone to random latency spikes.

Does the super hub three have USB ports, have seen my mates EE box has a printer connected up to it, hoping that Virgin dose that soon too. 

[Falconevo]

Just now, fixitnow said:

Does the super hub three have USB ports, have seen my mates EE box has a printer connected up to it, hoping that Virgin dose that soon too. 

Nope, its not got any USB.  I would personally never want USB on my modem/router but that's a personal security decision

[Ezzy-525]

4 minutes ago, fixitnow said:

The joke that me and some of my mates have is just to unplug yourself from the internet, can't be hacked then. I will ask Virgin for a hub three now lol. Cant afford proper networking gear. 

Those robbing bastards won't give you it for free lol

[JakeNTech]

Just now, Falconevo said:

Nope, its not got any USB.  I would personally never want USB on my modem/router but that's a personal security decision

Fair enough. 

[JakeNTech]

1 minute ago, Ezzy-525 said:

Those robbing bastards won't give you it for free lol

Yeah, they do like to get our money, our prices have gone up massively in the last two years, when we have change nothing, we would change but the only other alternative is a BT based ISP, and BT are truly terrible in out area.