PewDiePie fans strike yet again, Sonos speakers hacked.

[kennymccormick]

After hacking printers and GTA 5 worldwide, PewDiePie fans strike again.

 

Misconfigured Networks Vulnerable to PewDiePie Prank

Quote

We've been investigating a small number of households with improperly configured networks, such that Sonos players and other devices become accessible from the Internet, and someone instigated a prank to play a message in support of YouTube star PewDiePie on those systems. 

 

They are pretty creative..

[Sir Asvald]

Sigh... The poor average consumer just installs their tech with the default settings and calls it a day.. nothing to do with the company or their products. I make sure that anyone that wants to buy products that connects to a network or to the internet they must see if you can change the default password and username. If a product doesn't allow you to change passwords then DO NOT BUY IT.

 

 

[XR6]

I'm impressed but also disappointed. 

I'm impressed that they did this but I'm disappointed at the waste of skills.

 

[FunkmastaFlex]

If this is going to be a new trend, I won't be surprised when someone hacks into the national emergency alert system.

[kennymccormick]

Apparently customers had ports forwarded in their router exposing the speakers to the public. I have Sonos devices at home too and the Sonos configuration interface is on port 1400 and requires no username or password thus leaving the system exposed if you have 1400 forwarded. I don't understand why people have these ports open.

[Speed Weed]

4 minutes ago, FunkmastaFlex said:

If this is going to be a new trend, I won't be surprised when someone hacks into the national emergency alert system.

That person will get arrested. Government agencies don't have time to deal with Pewdiepie vs T-Series drama prank. 

 

These fans are messing with the good people. Wait until these fans begin to messing with the bad guys on the deepweb that are making malware for money. 

 

 

[Drak3]

These shitheads advertising for this overrated shitshow of a channel is getting really old really fast.

[kennymccormick]

2 minutes ago, Speed Weed said:

That person will get arrested. Government agencies don't have time to deal with Pewdiepie vs T-Series drama prank. 

Yeah messing with GTA, printers or speakers is pretty innocent but when they start messing with government systems that would take it way too far.

[Sir Asvald]

18 hours ago, kennymccormick said:

Apparently customers had ports forwarded in their router exposing the speakers to the public. I have Sonos devices at home too and the Sonos configuration interface is on port 1400 and requires no username or password thus leaving the system exposed if you have 1400 forwarded. I don't understand why people have these ports open.

Wow that is some bad stuff. Anyway, the average user doesn't even know what port forwarding is.. I'm guessing it's uPnP nonsense that port forwards the speaker. That is why I disable uPnP on my router. I don't want ports to be randomly open..

Edited December 8, 2018 by Abdul201588
Spelling error

[kennymccormick]

Just now, Abdul201588 said:

Wow that is some bad stuff. Anyway, the average user doesn't even know what port forwarding is.. I'm guess it's uPnP nonsense that port forwards the speaker. That is why I disable uPnP on my router. I don't want ports to be randomly open..

Well it would be pretty embarrassing for Sonos if these devices created inbound firewall rules by themselves. I don't see any reason why this would be necessary.

[Sir Asvald]

4 minutes ago, kennymccormick said:

Well it would be pretty embarrassing for Sonos if these devices created inbound firewall rules by themselves. I don't see any reason why this would be necessary.

I'm guessing they need to port forwarding in order to allow update maybe? Who knows. 

[abazigal]

I am surprised the speakers didn’t start by belting out bich lagsagna or something... 

[LukaH]

this sub war is really entertaining

[Doobeedoo]

This shit is just funny to what extent they go for this hah. 

[Syntaxvgm]

I'm waiting for ransomware that only decrypts when you subscribe to pewdiepie and unsub from t series.

[abazigal]

3 minutes ago, Doobeedoo said:

This shit is just funny to what extent they go for this hah. 

It’s funny until someone crosses the line, like possibly hacking government services (like someone mentioned above). It’s easy to get carried away with this sort of stuff, and I just hope no one gets hurt as a result of all this. 

[kennymccormick]

20 minutes ago, abazigal said:

I am surprised the speakers didn’t start by belting out bich lagsagna or something... 

 

They did apparently.

 

https://twitter.com/ronniehiggins/status/1071051359145779200

[williamcll]

I wished I was this good at hacking.

[BuckGup]

54 minutes ago, kennymccormick said:

Yeah messing with GTA, printers or speakers is pretty innocent but when they start messing with government systems that would take it way too far.

They should be thanking them as it's an innocent prank and they don't have malicious intent. Now Sonos knows and can patch this. If someone really wanted it they would just keep it to themselves

[BuckGup]

23 minutes ago, Syntaxvgm said:

I'm waiting for ransomware that only decrypts when you subscribe to pewdiepie and unsub from t series.

That's a great IDEA. R32 would work perfectly for this. You could even inject it into an adsense campaign you have. So you could pay like $50,000 and infect hundreds of thousands of PCs

[bcredeur97]

these people are users who unknowingly have their in-home devices PUBLICLY facing.

Who knows how else they've been hacked or if people are watching them without their knowledge? that's terrifying. how could this be so easy for someone to accidentally do?

[AlexGoesHigh]

4 hours ago, kennymccormick said:

Apparently customers had ports forwarded in their router exposing the speakers to the public. I have Sonos devices at home too and the Sonos configuration interface is on port 1400 and requires no username or password thus leaving the system exposed if you have 1400 forwarded. I don't understand why people have these ports open.

UPnP is a bitch, most likely all these people had a game or service that recommended port forwarding or UPnP.

[LukeSavenije]

4 hours ago, FunkmastaFlex said:

If this is going to be a new trend, I won't be surprised when someone hacks into the national emergency alert system.

why not the united nations already?

[Guest]

Stop hacking into people’s stuff. Making me want to unsubscribe from pewdiepie and subscribe to the T thing. Whether it’s easy to or harmless and whatnot it’s still a pretty douchy thing to do, let people get on with their day in peace.

[XR6]

4 hours ago, kennymccormick said:

I don't understand why people have these ports open.

Because it's Sonos default. I highly doubt the average consumer checks if their ports are open.

It's not really the consumer's fault though. It's partly Sonos' fault for having an open port set as default and it's partly these douchebags for 'hacking' into the devices.