My guess is that, at least, some router ssh implementation is insecure, possibly... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

boracay on Jan 2, 2015 | parent | context | favorite | on: Why aren’t we using SSH for everything?

My guess is that, at least, some router ssh implementation is insecure, possibly not by accident.

From the slides:

Page 19: "SSH [...] Potentially recover user names and passwords" Page 36: "SSH - often have router configurations and user credentials [...]"

http://www.spiegel.de/media/media-35515.pdf

shazow on Jan 2, 2015 [–]

Right, I saw that also. Is it referring to routers that happen to run SSH with default root/admin passwords or something? I couldn't find anything more concrete.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact