Feeds

BT battens down Home Hub backdoor

Lockdown shuts out pwners

HP ProLiant Gen8: Integrated lifecycle automation

BT has sealed a critical security hole in the Home Hub that offered hackers full control of the router, which is in about two million UK homes.

The firm's latest update has kneecapped part of the router's firmware called Remote Assistance, which gives customer support staff admin rights to investigate problems.

A BT spokesman said service will be unaffected by disabling the feature, since support can still access the Home Hub using the separate Remote Access feature. "Remote Assistance" will still appear in the router's menu page, but the link will return an error.

Earlier this month we reported how researchers had exploited a firmware bug to hurdle the Hub's admin password authentication. All it required was for a naive surfer to hit a malicious link.

BT's inhouse security team quickly launched an investigation. The firm had been criticised by the same researchers for failing to respond to a vulnerability in another of its routers reported last year.

BT's update on the Home Hub flap is here. ®

Eight steps to building an HP BladeSystem

More from The Register

next story
Apple fanbois SCREAM as update BRICKS their Macbook Airs
Ragegasm spills over as firmware upgrade kills machines
THUD! WD plonks down SIX TERABYTE 'consumer NAS' fatboy
Now that's a LOT of porn or pirated movies. Or, you know, other consumer stuff
EU's top data cops to meet Google, Microsoft et al over 'right to be forgotten'
Plan to hammer out 'coherent' guidelines. Good luck chaps!
US judge: YES, cops or feds so can slurp an ENTIRE Gmail account
Crooks don't have folders labelled 'drug records', opines NY beak
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
FLAPE – the next BIG THING in storage
Find cold data with flash, transmit it from tape
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.