Feeds

BT battens down Home Hub backdoor

Lockdown shuts out pwners

Next gen security for virtualised datacentres

BT has sealed a critical security hole in the Home Hub that offered hackers full control of the router, which is in about two million UK homes.

The firm's latest update has kneecapped part of the router's firmware called Remote Assistance, which gives customer support staff admin rights to investigate problems.

A BT spokesman said service will be unaffected by disabling the feature, since support can still access the Home Hub using the separate Remote Access feature. "Remote Assistance" will still appear in the router's menu page, but the link will return an error.

Earlier this month we reported how researchers had exploited a firmware bug to hurdle the Hub's admin password authentication. All it required was for a naive surfer to hit a malicious link.

BT's inhouse security team quickly launched an investigation. The firm had been criticised by the same researchers for failing to respond to a vulnerability in another of its routers reported last year.

BT's update on the Home Hub flap is here. ®

Next gen security for virtualised datacentres

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.