TR-069 remote management port.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • stj
    Great Sage 齊天大聖
    • Dec 2009
    • 31028
    • Albion

    #1

    TR-069 remote management port.

    is hacked - i warned about that shit!
    http://www.theregister.co.uk/2016/11...assive_attack/
  • diif
    Badcaps Legend
    • Feb 2014
    • 6978
    • England

    #2
    Re: TR-069 remote management port.

    That's not hacking, that's poor configuration and accepting commands without authentication but I get what you're saying.
    Oh what a surprise to see TalkTalk mentioned. !

    Comment

    • stj
      Great Sage 齊天大聖
      • Dec 2009
      • 31028
      • Albion

      #3
      Re: TR-069 remote management port.

      they assume it's TR-064 used.
      the TR-069 password can be recovered from the flash - and i bet they are all the same for the isp model.
      if not i bet they are just the SHA1 of a twist on the mac address like the default wifi keys always are!!

      Comment

      • diif
        Badcaps Legend
        • Feb 2014
        • 6978
        • England

        #4
        Re: TR-069 remote management port.

        All of the other exploits used by Mirai were hard coded default usernames and passwords, I don't see why this one would be any different.
        I can only see this growing as more and more devices are added to the list over time.

        Comment

        • stj
          Great Sage 齊天大聖
          • Dec 2009
          • 31028
          • Albion

          #5
          Re: TR-069 remote management port.

          if it wasnt hidden, users could disable it.
          who owns your router if you dont have total admin rights?!!

          Comment

          • diif
            Badcaps Legend
            • Feb 2014
            • 6978
            • England

            #6
            Re: TR-069 remote management port.

            If the ISP actually carried out due diligence rather than go for the lowest bid for the hardware the users wouldn't need to disable it as it wouldn't be there.

            Most belong to the ISP in the UK.

            Comment

            • ddscentral
              Senior Member
              • Mar 2008
              • 151
              • Lithuania, EU

              #7
              Re: TR-069 remote management port.

              Originally posted by stj
              if it wasnt hidden, users could disable it.
              who owns your router if you dont have total admin rights?!!
              That's the catch. Many ISPs lock-down remote management options so that users can't disable them. I remember having to hack my ISP supplied DSL router (an ADB unit) to get full admin access so I could disable all the remote management crap.

              That's why I always use my own routers.
              Last edited by ddscentral; 11-29-2016, 12:52 PM.

              Comment

              • stj
                Great Sage 齊天大聖
                • Dec 2009
                • 31028
                • Albion

                #8
                Re: TR-069 remote management port.

                Originally posted by diif
                If the ISP actually carried out due diligence rather than go for the lowest bid for the hardware the users wouldn't need to disable it as it wouldn't be there.

                Most belong to the ISP in the UK.
                no, the custommer is either charged for them (BT) or they are supplied free on the understanding that they are a gift.
                the only company i know that retains ownership is sky.
                virgin routers are a grey area.
                then again, virgin routers are docsis3 so it's not much use for anything else in the u.k.

                Comment

                • vinceroger69
                  Badcaps Legend
                  • Mar 2012
                  • 6714
                  • uk

                  #9
                  Re: TR-069 remote management port.

                  slightly off topic but have you saw these new laws that have just came into force in the uk
                  http://www.independent.co.uk/life-st...-a7445276.html
                  https://www.theguardian.com/world/20...e-surveillance
                  Last edited by vinceroger69; 11-29-2016, 02:05 PM.

                  Comment

                  • stj
                    Great Sage 齊天大聖
                    • Dec 2009
                    • 31028
                    • Albion

                    #10
                    Re: TR-069 remote management port.

                    yes, the treason never ends.
                    but we have lots of camera mounts to hang the politicians from - and hansard to find out who is guilty!!!

                    Comment

                    • diif
                      Badcaps Legend
                      • Feb 2014
                      • 6978
                      • England

                      #11
                      Re: TR-069 remote management port.

                      Originally posted by stj
                      no, the custommer is either charged for them (BT) or they are supplied free on the understanding that they are a gift.
                      the only company i know that retains ownership is sky.
                      virgin routers are a grey area.
                      then again, virgin routers are docsis3 so it's not much use for anything else in the u.k.
                      They charge for delivery but come with the contract. They are the responsibility of the ISP.
                      Virgin modems are definitely owned by Virgin (although only in name). They can log in and view your connected devices and also will replace it when asked.

                      I believe the new laws Vince are just legalising some of what GCHQ have been doing for a while, whilst shifting the responsibility of saving the data to the ISPs.

                      With the annual cost of a decent VPN provider costing less than the price of a good night out I don't know why everyone doesn't use one.

                      Comment

                      • stj
                        Great Sage 齊天大聖
                        • Dec 2009
                        • 31028
                        • Albion

                        #12
                        Re: TR-069 remote management port.

                        because man-in-the-middle at the ISP or Gateway will compromise HTTPS and most VPN's are in the u.s. and covered by security letters - in other words, the NSA virtually run them.

                        Comment

                        • diif
                          Badcaps Legend
                          • Feb 2014
                          • 6978
                          • England

                          #13
                          Re: TR-069 remote management port.

                          Lots aren't.
                          A fairly comprehensive list here.
                          https://thatoneprivacysite.net/vpn-comparison-chart/

                          Comment

                          • vinceroger69
                            Badcaps Legend
                            • Mar 2012
                            • 6714
                            • uk

                            #14
                            Re: TR-069 remote management port.

                            I have never looked into vpn service etc so dont know anything at all about it in basic terms what does it do and is it worth having it? also would you be able to use streaming boxes still or will content be blocked thanks for any advice you can offer.

                            Comment

                            • diif
                              Badcaps Legend
                              • Feb 2014
                              • 6978
                              • England

                              #15
                              Re: TR-069 remote management port.

                              Originally posted by vinceroger69
                              I have never looked into vpn service etc so dont know anything at all about it in basic terms what does it do and is it worth having it? also would you be able to use streaming boxes still or will content be blocked thanks for any advice you can offer.
                              Imagine it as a secure tunnel, though your ISP through ignoring the ever growing block list to a server in a country of your choice. Nothing is blocked and with the good ones nothing is logged. Some let you torrent too
                              I have it on my PC and my phones.

                              Comment

                              • vinceroger69
                                Badcaps Legend
                                • Mar 2012
                                • 6714
                                • uk

                                #16
                                Re: TR-069 remote management port.

                                Thanks thats good to know.

                                Comment

                                Related Topics

                                Collapse

                                • TurcoLoco
                                  Questions About The Numark MixDeck Onboard DC Port
                                  by TurcoLoco
                                  Hello all,
                                  I have a Numark MixDeck from 2011. The power supply seems OK but the DC port within the deck itself seems broken or loose.
                                  The device will not power on until the DC connector is inserted and then turned a little counterclockwise then it works but if you touch the cord, poof!

                                  I am guessing the cube shaped DC port on the board is bad and needs to be replace?
                                  Does anyone know what this part is called so I can check on DigiKey or somewhere?
                                  TIA...
                                  08-05-2025, 04:00 PM
                                • fredyjbi
                                  please help, friend, thinkpad L480 NM-B461 rev 1.0 JDOCK1 type C port 5volt only, thank you
                                  by fredyjbi
                                  I have a thinkpad L480 NM-B461 rev 1.0 laptop functioning normally with Type 1 port (JUSBC1)
                                  if you use port type C 2 (JDOCK1) with a usb type meter it only displays 5v, thank you
                                  I tried to look at the schematic diagram USBC_VBUS20, which is the port path from JusBC 1 to U4701 then goes to the system2 charging IC, why is there no system2 path leading to the charging IC on the TYPEC_VBUS20 port which is JDOCK1, thank you for your help.

                                  if you look at the power sequence there must be 2 types of port type C a (JUSBC1) via U4701 and port type C b (JDOCK1)
                                  On the type...
                                  07-09-2024, 11:28 PM
                                • cstout
                                  DeLonghi AC Remote only accepts 3V
                                  by cstout
                                  Hello all, I've been looking into this portable air conditioner's remote control and can't find what could be causing the problem - or possibly this remote is just terribly designed.

                                  The remote only works at exactly 3V - if I drop it any lower, using my bench power supply, to say, 2.9V then the remote will not flash the display and turn off. I don't have any AAA batteries that are exactly 1.5V each so I'm not sure if this remote is designed this way - to only use the freshest possible batteries, or if there's a failed component in the mix.

                                  I can't find any schematics...
                                  06-03-2024, 03:53 PM
                                • Mc_Millian
                                  Toshiba 50lf711u20 fire tv remote not pairing
                                  by Mc_Millian
                                  Hello everyone,

                                  I was wondering if anyone could help my in pairing a remote with a Toshiba fire tv?
                                  The Tv model number is: 50lf711u20 Rev B.


                                  I've already replaced all the the circuit boards within the tv along with the I.R. sensor receiver.

                                  I've tried 3 different remotes which should be fully compatible with this TV.


                                  Oddly enough. A few if the buttons on all of the remotes actually work. Even without pairing...which makes no sense.

                                  The power button, along with the volume,back,select, and directional...
                                  04-07-2022, 12:15 PM
                                • edugimeno
                                  HiSense 55A7500F won't obbey to remote after power on
                                  by edugimeno
                                  Hi! I have this TV set that does the following:
                                  1) I press the red power button on the remote
                                  2) The TV turns on normally
                                  3) After that it won't take any other command from the remote, neither power off, volume, channel, NOTHING
                                  4) We need to either pull the main cable or use the built in button at the bottom to select funcion OFF

                                  Then after it's off, it would again accept the TURN ON from the remote and same again

                                  BUT:
                                  -The remote does show the correct IR beam while observed thru a phone camera
                                  -The TV works fine while using the MiRemote...
                                  03-14-2023, 11:22 AM
                                • Loading...
                                • No more items.
                                Working...