Discussion:
TalkTalk router open to remote DNS hijacking
(too old to reply)
Christian Thorne
2015-03-27 12:53:22 UTC
Permalink
http://www.ispreview.co.uk/index.php/2015/03/uk-isp-talktalks-d-link-dsl-3680-router-potentially-vulnerable-to-dns-hijack.html

This time, TalkTalk customers are open to remote DNS hijacking due to
D-Link's terrible router security.
grinch
2015-03-27 21:05:41 UTC
Permalink
Post by Christian Thorne
http://www.ispreview.co.uk/index.php/2015/03/uk-isp-talktalks-d-link-dsl-3680-router-potentially-vulnerable-to-dns-hijack.html
This time, TalkTalk customers are open to remote DNS hijacking due to
D-Link's terrible router security.
Configure you computers manually perhaps ? and ignore the routers DNS
.My router has no DNS in it at all my network works just fine.
Christian Thorne
2015-03-27 23:39:15 UTC
Permalink
Post by grinch
Configure you computers manually perhaps ? and ignore the routers DNS
.My router has no DNS in it at all my network works just fine.
Manually specifying DNS servers in each client would certainly prevent
each client from using any hijacked ones on the TalkTalk router, that is
true.

Unfortunately though, as people generally have quite a few
internet-connected devices in the home these days, both wired and
wireless, it would a hassle to alter them all, assuming of course the
user had the technical knowledge to change their clients' DNS settings
in the first place.
Richard_CC
2015-03-28 09:51:17 UTC
Permalink
Post by Christian Thorne
Post by grinch
Configure you computers manually perhaps ? and ignore the routers DNS
.My router has no DNS in it at all my network works just fine.
Manually specifying DNS servers in each client would certainly prevent
each client from using any hijacked ones on the TalkTalk router, that is
true.
Unfortunately though, as people generally have quite a few
internet-connected devices in the home these days, both wired and
wireless, it would a hassle to alter them all, assuming of course the
user had the technical knowledge to change their clients' DNS settings
in the first place.
I agree, and in most households even if one person knows what they are
doing the others expect just to be able to use their devices without too
much thought.

I'm not on talk talk, but now I understand the potential vulnerability
of routers I will manually configure DNS on the machine that gets used
for orders and banking etc.
grinch
2015-03-28 11:09:10 UTC
Permalink
Post by Christian Thorne
Unfortunately though, as people generally have quite a few
Post by Christian Thorne
internet-connected devices in the home these days, both wired and
wireless, it would a hassle to alter them all, assuming of course the
user had the technical knowledge to change their clients' DNS settings
in the first place.
I agree, and in most households even if one person knows what they are
doing the others expect just to be able to use their devices without too
much thought.
Then the sooner they get hacked the better,teach them that you do need
to have a basic understanding of internet and security.

The same type that bleat when they loose data because they have no backups.

They are the bain of my life as I sometimes have to pick up the bits
afterwards,sells firewall though,sorry rant over.

I wonder where TT stand legally on this ?
Post by Christian Thorne
I'm not on talk talk, but now I understand the potential vulnerability
of routers I will manually configure DNS on the machine that gets used
for orders and banking etc.
The basic problem is the fact that your network is only one device away
from the internet and if that get compromised ?

I have a hardware router ,then a hardware firewall then my network . The
router can only be managed by the firewalls /32 IP address the firewall
can only be managed from the inside RF1918 address range,not eternally
at all.

I don’t allow telnet to the router at all just ssh2 and block on the
router incoming SSH telnet SSL to the entire network range.

All the above were bought on fleabay for less than £250 second hand

Oh and all my PC's/laptops have their own firewall
Christian Thorne
2015-03-28 11:37:19 UTC
Permalink
Post by grinch
I wonder where TT stand legally on this ?
That is an interesting question. I'm not aware if any router suppliers
or manufacturers have ever been sued because an exploit in their router
has led to a customer being defrauded.

In any case, it appears TalkTalk are not admitting to the vulnerability.
They will probably quietly slip out a firmware update in a few weeks, if
D-Link can get their act together.

Loading...