default thompson wifi passwords

Forums › Spark New Zealand › default thompson wifi passwords

hamish225

1312 posts

Uber Geek
+1 received by user: 171

Topic # 132235 14-Oct-2013 13:51

so today in class we were learning about wifi and the teacher encouraged us to look for applications that we could use to hack into peoples WiFi with.

i found an app on the windows phone store that has all the default thompson passwords, i used it to get onto both of my neighbors networks that use thompson routers.

should telecom be recalling these routers?

PS: i dont intend to steal their bandwidth, just purely tried for educational purposes and i deleted the networks from my phone after having connected.

1 | 2

2527 posts

Uber Geek
+1 received by user: 939

Subscriber

Reply # 914808 14-Oct-2013 14:09

This has been the case for years. Alcatel simply use an algorithm to determine the SSID and PSK, once you know the algorithm (which is published in numerous places on the internet) you can calculate the default password from the SSID.

As to a recall - why? Since when was leaving any password as it's default a good security measure? As with anything, if you even remotely care about the security, change the default password.

Windows 7 x64 // i5-3570K // 16GB DDR3-1600 // GTX660Ti 2GB // Samsung 830 120GB SSD // OCZ Agility4 120GB SSD // Samsung U28D590D @ 3840x2160 & Asus PB278Q @ 2560x1440
Samsung Galaxy S5 SM-G900I w/Spark

GregV

767 posts

Ultimate Geek
+1 received by user: 227

Reply # 914809 14-Oct-2013 14:10

4 people support this post

so today in class we were learning about door locks and the teacher encouraged us to look for tools that we could use to break into peoples homes with.

i found a tool at the hardware store that has all the default key layouts for ACME doors, i used it to get into both of my neighbors houses that use ACME doors.

should ACME be recalling these doors?

PS: i dont intend to steal their stuff, just purely tried for educational purposes and i destroyed the tool after having entered.

---

How does that sound now?

michaelmurfy

Mr Snotty
8177 posts

Uber Geek
+1 received by user: 4158

Moderator

Trusted

Lifetime subscriber

Reply # 914830 14-Oct-2013 14:38

It's just like my neighbours are using WPS on their routers. I could easily open up a terminal and compile Reaver for my laptop and break into their WiFi but don't since it's their network.

I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

It's the users responsibility to secure their stuff, but a good honest person wouldn't go breaking into their networks or stealing their petrol due to the fact we're better than that. If a person leaves a front door unlocked of their house we don't go in and snoop around.

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

BinaryLimited

787 posts

Ultimate Geek
+1 received by user: 79

Trusted

Reply # 914835 14-Oct-2013 14:40

there's also a python script available on the internet :)

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

BinaryLimited

787 posts

Ultimate Geek
+1 received by user: 79

Trusted

Reply # 914838 14-Oct-2013 14:41

3 people support this post

michaelmurfy: I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

and petrol tastes bad...

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

linw

1945 posts

Uber Geek
+1 received by user: 386

Subscriber

Reply # 914925 14-Oct-2013 16:47

Maybe he sniffs it!

michaelmurfy

Mr Snotty
8177 posts

Uber Geek
+1 received by user: 4158

Moderator

Trusted

Lifetime subscriber

Reply # 914929 14-Oct-2013 16:55

Right now I can't decide if I'm wide awake or very tired. I think I've had too much substance today.

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

hamish225

1312 posts

Uber Geek
+1 received by user: 171

Reply # 914953 14-Oct-2013 18:38

im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

michaelmurfy

Mr Snotty
8177 posts

Uber Geek
+1 received by user: 4158

Moderator

Trusted

Lifetime subscriber

Reply # 914959 14-Oct-2013 18:43

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

Support calls:
1) I've forgotten my password
2) How do you set up the WiFi's?
3) Why does my password have to be x characters?
4) Why do I need to do this?
5) Oh "ISP" you skumbags, you make me change my password, why can't you just provide one like xx ISP?

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

Inphinity

2527 posts

Uber Geek
+1 received by user: 939

Subscriber

Reply # 914967 14-Oct-2013 18:58

It's no worse than the multitude of WPS-enabled routers out there, many of which will happily give you the PIN, and thus the relevant encryption password, if you ask nicely.

l43a2

1505 posts

Uber Geek
+1 received by user: 474

Trusted

Reply # 914985 14-Oct-2013 19:31

backtrack and reaver :P

cheap secure seedboxes

Yyrael

222 posts

Master Geek
+1 received by user: 45

Trusted

Reply # 914986 14-Oct-2013 19:33

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

As Michael has said it causes more problems than it makes. By the standard you are setting all companies retailing computers should force users to buy anti-virus software before the computer will work.
At the end of the day the security risks or precautions you choose to take are your own and it is not the responsibility of a provider to dictate how you use the services you pay for (short of policing illegal activities where viable).

Ragnor

8029 posts

Uber Geek
+1 received by user: 387

Trusted

Subscriber

Reply # 914997 14-Oct-2013 20:02

hamish225:

should telecom be recalling these routers?

Classic case of convenience trumping security, which is a mistake!

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

Inphinity

2527 posts

Uber Geek
+1 received by user: 939

Subscriber

Reply # 914999 14-Oct-2013 20:05

Ragnor:

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

And they're right. Breathing is almost too hard for the masses.

linw

1945 posts

Uber Geek
+1 received by user: 386

Subscriber

Reply # 915015 14-Oct-2013 20:17

It's not that it is hard to change the password. The problem is them remembering it.

They can't even remember that it is on the bottom of the case!

1 | 2