Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is the danger of allowing your vendor to automatically remotely execute arbitrary code on your devices.


He had auto updates turned off, so there was no "allowing" happening. It's not even clear yet what happened, but one possibility is that this was someone taking advantage of an exploit on routers that had NOT been automatically updated.


yes, as you suggest, it appears that Asus routers were targeted by a 0day that they are known to lack the skills to deal with




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: