Feeds

Sky Broadband puts the fault into default Wi-Fi security

Users in guess-able random keys quandary

Next gen security for virtualised datacentres

Sky Broadband advises customers to consider changing their default Wi-Fi passwords - because the apparently random network keys are guess-able.

The ISP issues customers with a wireless router that is pre-configured with wireless security switched on, and an apparently random network key. This sounds like a good plan. However, the key is based on the router's MAC address, which is broadcast "in the clear" - i.e in unencrypted form.

Reg reader James, who brought the issue to our attention, said that getting the MAC address is trivial and working out the algorithm that links it to a network key is "not exactly rocket science".

The security shortcoming affects only Sky Broadband's original router, a rebadged Netgear DG834GT, and applies only where customers keep the default network key. This leaves plenty of scope for problems. "With about a million Sky customers using the original DG834GT router, there's likely to be hundreds of thousands of Sky customers thinking that they're safe, when in fact they are not," James notes.

Sky has not issued a general alert, even though it was informed of the matter a month ago, through its SkyUser community support forum. "Sky offered advice to users on that forum, to either disable wireless networking, or change their wireless password, but they still haven't told their wider customer base about this problem," James said.

In response to our questions, Sky Broadband said users can improve security by changing their default password (as explained here), comparing this, more or less, to adding a lock to an already bolted door.

"A wireless router is great for flexibility and convenience but no one wants to unwittingly share their connection with another user. We pre-configure all our routers with security settings so that customers' bandwidth is protected from day one. Our website offers advice to customers on how to further enhance this level of protection by changing their default password to another of their own choice," a Sky spokeswoman told El Reg. ®

Boost IT visibility and business value

More from The Register

next story
Canadian ISP Shaw falls over with 'routing' sickness
How sure are you of cloud computing now?
Don't call it throttling: Ericsson 'priority' tech gives users their own slice of spectrum
Actually it's a nifty trick - at least you'll pay for what you get
Three floats Jolla in Hong Kong: Says Sailfish is '3rd option'
Network throws hat into ring with Linux-powered handsets
Fifteen zero days found in hacker router comp romp
Four routers rooted in SOHOpelessly Broken challenge
New Sprint CEO says he will lower axe on staff – but prices come first
'Very disruptive' new rates to be revealed next week
PwC says US biz lagging in Internet of Things
Grass is greener in Asia, say the sensors
Ofcom sees RISE OF THE MACHINE-to-machine cell comms
Study spots 9% growth in IoT m2m mobile data connections
O2 vs Vodafone: Mobe firms grab for GCHQ, gov.uk security badge
No, the spooks love US best, say rival firms
Ancient pager tech SMS: It works, it's fab, but wow, get a load of that incoming SPAM
Networks' main issue: they don't know how it works, says expert
Trans-Pacific: Google spaffs cash on FAST undersea packet-flinging
One of 6 backers for new 60 Tbps cable to hook US to Japan
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.