default thompson wifi passwords

Forums › Spark New Zealand (including Skinny and BigPipe) › default thompson wifi passwords

hamish225

1430 posts

Uber Geek
+1 received by user: 215

ID Verified

#132235 14-Oct-2013 13:51

so today in class we were learning about wifi and the teacher encouraged us to look for applications that we could use to hack into peoples WiFi with.

i found an app on the windows phone store that has all the default thompson passwords, i used it to get onto both of my neighbors networks that use thompson routers.

should telecom be recalling these routers?

PS: i dont intend to steal their bandwidth, just purely tried for educational purposes and i deleted the networks from my phone after having connected.

*Insert big spe*dtest result here*

1 | 2

2780 posts

Uber Geek
+1 received by user: 1184

#914808 14-Oct-2013 14:09

This has been the case for years. Alcatel simply use an algorithm to determine the SSID and PSK, once you know the algorithm (which is published in numerous places on the internet) you can calculate the default password from the SSID.

As to a recall - why? Since when was leaving any password as it's default a good security measure? As with anything, if you even remotely care about the security, change the default password.

GregV

932 posts

Ultimate Geek
+1 received by user: 304

#914809 14-Oct-2013 14:10

so today in class we were learning about door locks and the teacher encouraged us to look for tools that we could use to break into peoples homes with.

i found a tool at the hardware store that has all the default key layouts for ACME doors, i used it to get into both of my neighbors houses that use ACME doors.

should ACME be recalling these doors?

PS: i dont intend to steal their stuff, just purely tried for educational purposes and i destroyed the tool after having entered.

---

How does that sound now?

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#914830 14-Oct-2013 14:38

It's just like my neighbours are using WPS on their routers. I could easily open up a terminal and compile Reaver for my laptop and break into their WiFi but don't since it's their network.

I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

It's the users responsibility to secure their stuff, but a good honest person wouldn't go breaking into their networks or stealing their petrol due to the fact we're better than that. If a person leaves a front door unlocked of their house we don't go in and snoop around.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

BinaryLimited

796 posts

Ultimate Geek
+1 received by user: 80

Trusted

#914835 14-Oct-2013 14:40

there's also a python script available on the internet :)

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

BinaryLimited

796 posts

Ultimate Geek
+1 received by user: 80

Trusted

#914838 14-Oct-2013 14:41

michaelmurfy: I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

and petrol tastes bad...

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

linw

2893 posts

Uber Geek
+1 received by user: 1205

#914925 14-Oct-2013 16:47

Maybe he sniffs it!

Dyson

Shop now for Dyson appliances (affiliate link).

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#914929 14-Oct-2013 16:55

Right now I can't decide if I'm wide awake or very tired. I think I've had too much substance today.

hamish225

1430 posts

Uber Geek
+1 received by user: 215

ID Verified

#914953 14-Oct-2013 18:38

im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

*Insert big spe*dtest result here*

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#914959 14-Oct-2013 18:43

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

Support calls:
1) I've forgotten my password
2) How do you set up the WiFi's?
3) Why does my password have to be x characters?
4) Why do I need to do this?
5) Oh "ISP" you skumbags, you make me change my password, why can't you just provide one like xx ISP?

Inphinity

2780 posts

Uber Geek
+1 received by user: 1184

#914967 14-Oct-2013 18:58

It's no worse than the multitude of WPS-enabled routers out there, many of which will happily give you the PIN, and thus the relevant encryption password, if you ask nicely.

l43a2

1784 posts

Uber Geek
+1 received by user: 591

ID Verified

Trusted

#914985 14-Oct-2013 19:31

backtrack and reaver :P

AliExpress

Shop now on AliExpress (affiliate link).

Yyrael

222 posts

Master Geek
+1 received by user: 45

Trusted

#914986 14-Oct-2013 19:33

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

As Michael has said it causes more problems than it makes. By the standard you are setting all companies retailing computers should force users to buy anti-virus software before the computer will work.
At the end of the day the security risks or precautions you choose to take are your own and it is not the responsibility of a provider to dictate how you use the services you pay for (short of policing illegal activities where viable).

Ragnor

8279 posts

Uber Geek
+1 received by user: 585

Trusted

#914997 14-Oct-2013 20:02

hamish225:

should telecom be recalling these routers?

Classic case of convenience trumping security, which is a mistake!

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

Inphinity

2780 posts

Uber Geek
+1 received by user: 1184

#914999 14-Oct-2013 20:05

Ragnor:

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

And they're right. Breathing is almost too hard for the masses.

linw

2893 posts

Uber Geek
+1 received by user: 1205

#915015 14-Oct-2013 20:17

It's not that it is hard to change the password. The problem is them remembering it.

They can't even remember that it is on the bottom of the case!

1 | 2