Feeds

Sky Broadband puts the fault into default Wi-Fi security

Users in guess-able random keys quandary

Top 5 reasons to deploy VMware with Tegile

Sky Broadband advises customers to consider changing their default Wi-Fi passwords - because the apparently random network keys are guess-able.

The ISP issues customers with a wireless router that is pre-configured with wireless security switched on, and an apparently random network key. This sounds like a good plan. However, the key is based on the router's MAC address, which is broadcast "in the clear" - i.e in unencrypted form.

Reg reader James, who brought the issue to our attention, said that getting the MAC address is trivial and working out the algorithm that links it to a network key is "not exactly rocket science".

The security shortcoming affects only Sky Broadband's original router, a rebadged Netgear DG834GT, and applies only where customers keep the default network key. This leaves plenty of scope for problems. "With about a million Sky customers using the original DG834GT router, there's likely to be hundreds of thousands of Sky customers thinking that they're safe, when in fact they are not," James notes.

Sky has not issued a general alert, even though it was informed of the matter a month ago, through its SkyUser community support forum. "Sky offered advice to users on that forum, to either disable wireless networking, or change their wireless password, but they still haven't told their wider customer base about this problem," James said.

In response to our questions, Sky Broadband said users can improve security by changing their default password (as explained here), comparing this, more or less, to adding a lock to an already bolted door.

"A wireless router is great for flexibility and convenience but no one wants to unwittingly share their connection with another user. We pre-configure all our routers with security settings so that customers' bandwidth is protected from day one. Our website offers advice to customers on how to further enhance this level of protection by changing their default password to another of their own choice," a Sky spokeswoman told El Reg. ®

Intelligent flash storage arrays

More from The Register

next story
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
Broadband sellers in the UK are UP TO no good, says Which?
Speedy network claims only apply to 10% of customers
Virgin Media struck dumb by NATIONWIDE packet loss balls-up
Turning it off and on again fixes glitch 12 HOURS LATER
Fujitsu CTO: We'll be 3D-printing tech execs in 15 years
Fleshy techie disses network neutrality, helmet-less motorcyclists
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
Ofcom tackles complaint over Premier League footie TV rights
Virgin Media: UK fans pay the most for the fewest matches
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
The Heartbleed Bug: how to protect your business with Symantec
What happens when the next Heartbleed (or worse) comes along, and what can you do to weather another chapter in an all-too-familiar string of debilitating attacks?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.