Netgear Hides Router Backdoor Instead of Fixing It
A very recent firmware analysis from the reverse engineer Eloi Vanderbeken shows that NETGEAR didn't fix the backdoor on port 32764 but instead implemented a knocking feature that is now required to unlock the service.Summary from the slides: The knocking feature is initiated when a "packet type == 0x201" arrived at "ft_tool" that listens to the Ethernet packets. It only works with EtherType 0x8888 and the payload has to be "45d1bb339b07a6618b2114dbc0d7783e" which is the MD5-hash of the model number DGN1000. If such a packet arrives, the backdoor service /usr/bin/scfgmgr f- is launched.
Ars Technica reports :
The nature of the change, which leverages the same code as was used in the old firmware to provide administrative access over the concealed port, suggests that the backdoor is an intentional feature of the firmware and not just a mistake made in coding. "It's DELIBERATE," Vanderbecken asserted in his presentation.
(Cross posted on Soylentnews)
It keeps my mind on my mind
Don't wanna see too much, it makes me see to much
Sometimes I'd rather be blind
All the things that they're saying & doing
When they pass me by just fills me up with noise
It overloads me
I wanna disconnect myself
Pull my brain stem out and unplug myself
I want nothing right now, I want to pull it out
Chorus:
Yeah, I want to pull it out, yeah
I wanna break it all down, hey, I wanna pull it out
Yeah, yeah, disconnect myself, disconnect myself
I wanna see it go down, yeah, disconnect myself
A thousand miles an hour going nowhere fast
Clinging to the details of your past
Talking 'bout your damages and your wasting my time
Wanna be the king of pain, stand in line
All the numbers and the colours and the facts
Backed by the rumours and the figures and the stats
I think I'm gonna download my mind
Chorus
Too damn bad if at the end of the day the only thoughts
In your brain are all the things that they say, what a waste
Too damn bad if at the end of the line you got no idea
What's on your own mind, you got no one to blame but yourself
Too much to know, too much to see
It might mean something to you but it's nothing to me
Its just another ad for someone's version of how they think it should be
I wanna disconnect myself, pull my brain stem out, unplug myself
I want nothing right now, I want to pull it out