Feeds

Sky Broadband puts the fault into default Wi-Fi security

Users in guess-able random keys quandary

5 things you didn’t know about cloud backup

Sky Broadband advises customers to consider changing their default Wi-Fi passwords - because the apparently random network keys are guess-able.

The ISP issues customers with a wireless router that is pre-configured with wireless security switched on, and an apparently random network key. This sounds like a good plan. However, the key is based on the router's MAC address, which is broadcast "in the clear" - i.e in unencrypted form.

Reg reader James, who brought the issue to our attention, said that getting the MAC address is trivial and working out the algorithm that links it to a network key is "not exactly rocket science".

The security shortcoming affects only Sky Broadband's original router, a rebadged Netgear DG834GT, and applies only where customers keep the default network key. This leaves plenty of scope for problems. "With about a million Sky customers using the original DG834GT router, there's likely to be hundreds of thousands of Sky customers thinking that they're safe, when in fact they are not," James notes.

Sky has not issued a general alert, even though it was informed of the matter a month ago, through its SkyUser community support forum. "Sky offered advice to users on that forum, to either disable wireless networking, or change their wireless password, but they still haven't told their wider customer base about this problem," James said.

In response to our questions, Sky Broadband said users can improve security by changing their default password (as explained here), comparing this, more or less, to adding a lock to an already bolted door.

"A wireless router is great for flexibility and convenience but no one wants to unwittingly share their connection with another user. We pre-configure all our routers with security settings so that customers' bandwidth is protected from day one. Our website offers advice to customers on how to further enhance this level of protection by changing their default password to another of their own choice," a Sky spokeswoman told El Reg. ®

5 things you didn’t know about cloud backup

More from The Register

next story
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
So, Apple won't sell cheap kit? Prepare the iOS garden wall WRECKING BALL
It can throw the low cost race if it looks to the cloud
EE fails to apologise for HUGE T-Mobile outage that hit Brits on Friday
Customer: 'Please change your name to occasionally somewhere'
Time Warner Cable customers SQUEAL as US network goes offline
A rude awakening: North Americans greeted with outage drama
We need less U.S. in our WWW – Euro digital chief Steelie Neelie
EC moves to shift status quo at Internet Governance Forum
BT customers face broadband and landline price hikes
Poor punters won't be affected, telecoms giant claims
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?