Sky Broadband advises customers to consider changing their default Wi-Fi passwords - because the apparently random network keys are guess-able.

The ISP issues customers with a wireless router that is pre-configured with wireless security switched on, and an apparently random network key. This sounds like a good plan. However, the key is based on the router's MAC address, which is broadcast "in the clear" - i.e in unencrypted form.

The security shortcoming affects only Sky Broadband's original router, a rebadged Netgear DG834GT, and applies only where customers keep the default network key. This leaves plenty of scope for problems. "With about a million Sky customers using the original DG834GT router, there's likely to be hundreds of thousands of Sky customers thinking that they're safe, when in fact they are not," James notes.

Sky has not issued a general alert, even though it was informed of the matter a month ago, through its SkyUser community support forum. "Sky offered advice to users on that forum, to either disable wireless networking, or change their wireless password, but they still haven't told their wider customer base about this problem," James said.

In response to our questions, Sky Broadband said users can improve security by changing their default password (as explained here), comparing this, more or less, to adding a lock to an already bolted door.

"A wireless router is great for flexibility and convenience but no one wants to unwittingly share their connection with another user. We pre-configure all our routers with security settings so that customers' bandwidth is protected from day one. Our website offers advice to customers on how to further enhance this level of protection by changing their default password to another of their own choice," a Sky spokeswoman told El Reg. ®

Related stories

• Sky network downed in London (18 February 2009)
• Updated Sky drops download limit and tops satisfaction poll (17 September 2008)
• Sky ices Picnic, blames Ofcom (12 September 2008)
• Too dim to set up your phone? Pay someone else to do it (22 May 2008)
• Ericsson CMO says Wi-Fi hotspots' days are numbered (20 March 2008)
• Sky will fight to keep ITV stake (21 February 2008)
• Sky broadband customers blindsided by SMTP switch-off (7 February 2008)
• More remote workers squatting next door's broadband (5 February 2008)
• CES Netgear extends next-gen Wi-Fi into 5GHz band (6 January 2008)
• TJX settles with banks over credit card breach (20 December 2007)
• Man uses networked 'crazy' toaster to hack PC (18 December 2007)
• Microsoft wireless keyboards crypto cracked (3 December 2007)
• Half of computer users are Wi-Fi thieves (15 November 2007)