HomeLatest ThreadsGreatest ThreadsForums & GroupsMy SubscriptionsMy Posts
DU Home » Latest Threads » Forums & Groups » Main » Latest Breaking News (Forum) » U.S. government warns of ...
Introducing Discussionist: A new forum by the creators of DU

Tue Jan 29, 2013, 01:40 PM

U.S. government warns of hack threat to network gear

Source: Reuters

The U.S. Department of Homeland Security urged computer users on Tuesday to disable a common networking technology feature, after researchers warned that hackers could exploit flaws to gain access to tens of millions of vulnerable devices.

The U.S. government's Computer Emergency Readiness Team advised consumers and businesses to disable a feature known as Universal Plug and Play or UPnP, and some other related features that make devices from computers to printers accessible over the open Internet.

UPnP is designed to let networks identify and communicate with equipment, reducing the amount of work it takes to set up networks. Dave Marcus, chief architect of advanced research and threat intelligence with Intel's McAfee unit, said hackers would have a "field day" once the vulnerability in network devices is exposed.

"Historically, these are amongst the last to be updated and protected properly which makes them a gold mine for potential abuse and exploitation," said Marcus, who advises government agencies and corporations on protections against sophisticated attacks.

Read more: http://www.reuters.com/article/2013/01/29/us-cybersecurity-bugs-idUSBRE90S06320130129

7 replies, 2084 views

Reply to this thread

Back to top Alert abuse

Always highlight: 10 newest replies | Replies posted after I mark a forum
Replies to this discussion thread
Arrow 7 replies Author Time Post
Reply U.S. government warns of hack threat to network gear (Original post)
Bosonic Jan 2013 OP
Duer 157099 Jan 2013 #1
longship Jan 2013 #4
EastKYLiberal Jan 2013 #2
OKNancy Jan 2013 #3
RC Jan 2013 #5
magic59 Jan 2013 #6
lrellok Jan 2013 #7

Response to Bosonic (Original post)

Tue Jan 29, 2013, 01:48 PM

1. A good resource for understanding these kinds of things:

http://www.blackviper.com/

Been following his advice for years and have disabled UPnP long, long, long ago.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Duer 157099 (Reply #1)

Tue Jan 29, 2013, 01:56 PM

4. Great DU name, 157099. nt

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Bosonic (Original post)

Tue Jan 29, 2013, 01:53 PM

2. I know a hacker that has been exploting these things for 10 years or more. nt

 

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Bosonic (Original post)

Tue Jan 29, 2013, 01:55 PM

3. link suggested in the article to check



Edit: I took out that link. My AVG security said the software appeared "malicious" and would not let me download it!

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Bosonic (Original post)

Tue Jan 29, 2013, 02:15 PM

5. All you need to do is

 

Last edited Tue Jan 29, 2013, 03:23 PM - Edit history (1)

Right click on My Computer (XP) or Computer on Windows 7
Select Manage
Click on the plus next to Services and Applications
Click on Services
Spread out the first column so you can read it
Scroll down to Universal Plug and Play Device Host or UPnP Device Host on Windows 7
Right Select Properties
In the drop down box next to Startup Type, select Disabled
OK to back out of everything.
Done




A good explanation and a small program that works with XP and Windows 7
You need to be an Administrator to run this program on Windows 7. Right Click and "Run as Administrator"
https://www.grc.com/unpnp/unpnp.htm

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Bosonic (Original post)

Tue Jan 29, 2013, 02:21 PM

6. And an even easier way to turn PNP on or off is

 

to download a free very small program called unpnp.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Bosonic (Original post)

Tue Jan 29, 2013, 08:45 PM

7. What does that turn off?

What services are disabled when you shut off the UPnP? Wireless internet? Network access? Automatic Log in to wireless?

Reply to this post

Back to top Alert abuse Link here Permalink

Reply to this thread