default thompson wifi passwords

Forums › Spark New Zealand › default thompson wifi passwords

hamish225

1316 posts

Uber Geek

# 132235 14-Oct-2013 13:51

so today in class we were learning about wifi and the teacher encouraged us to look for applications that we could use to hack into peoples WiFi with.

i found an app on the windows phone store that has all the default thompson passwords, i used it to get onto both of my neighbors networks that use thompson routers.

should telecom be recalling these routers?

PS: i dont intend to steal their bandwidth, just purely tried for educational purposes and i deleted the networks from my phone after having connected.

1 | 2

2540 posts

Uber Geek

# 914808 14-Oct-2013 14:09

This has been the case for years. Alcatel simply use an algorithm to determine the SSID and PSK, once you know the algorithm (which is published in numerous places on the internet) you can calculate the default password from the SSID.

As to a recall - why? Since when was leaving any password as it's default a good security measure? As with anything, if you even remotely care about the security, change the default password.

GregV

786 posts

Ultimate Geek

# 914809 14-Oct-2013 14:10

4 people support this post

so today in class we were learning about door locks and the teacher encouraged us to look for tools that we could use to break into peoples homes with.

i found a tool at the hardware store that has all the default key layouts for ACME doors, i used it to get into both of my neighbors houses that use ACME doors.

should ACME be recalling these doors?

PS: i dont intend to steal their stuff, just purely tried for educational purposes and i destroyed the tool after having entered.

---

How does that sound now?

michaelmurfy

Mr Snotty
8865 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 914830 14-Oct-2013 14:38

It's just like my neighbours are using WPS on their routers. I could easily open up a terminal and compile Reaver for my laptop and break into their WiFi but don't since it's their network.

I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

It's the users responsibility to secure their stuff, but a good honest person wouldn't go breaking into their networks or stealing their petrol due to the fact we're better than that. If a person leaves a front door unlocked of their house we don't go in and snoop around.

BinaryLimited

791 posts

Ultimate Geek

Trusted

# 914835 14-Oct-2013 14:40

there's also a python script available on the internet :)

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

BinaryLimited

791 posts

Ultimate Geek

Trusted

# 914838 14-Oct-2013 14:41

3 people support this post

michaelmurfy: I've noticed that my neighbours car will be easy to siphon petrol off, I don't since it's their petrol.

and petrol tastes bad...

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

linw

2043 posts

Uber Geek

Subscriber

# 914925 14-Oct-2013 16:47

Maybe he sniffs it!

michaelmurfy

Mr Snotty
8865 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 914929 14-Oct-2013 16:55

Right now I can't decide if I'm wide awake or very tired. I think I've had too much substance today.

hamish225

1316 posts

Uber Geek

# 914953 14-Oct-2013 18:38

im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

michaelmurfy

Mr Snotty
8865 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 914959 14-Oct-2013 18:43

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

Support calls:
1) I've forgotten my password
2) How do you set up the WiFi's?
3) Why does my password have to be x characters?
4) Why do I need to do this?
5) Oh "ISP" you skumbags, you make me change my password, why can't you just provide one like xx ISP?

Inphinity

2540 posts

Uber Geek

# 914967 14-Oct-2013 18:58

It's no worse than the multitude of WPS-enabled routers out there, many of which will happily give you the PIN, and thus the relevant encryption password, if you ask nicely.

l43a2

1545 posts

Uber Geek

Trusted

# 914985 14-Oct-2013 19:31

backtrack and reaver :P

cheap secure seedboxes

Yyrael

222 posts

Master Geek

Trusted

# 914986 14-Oct-2013 19:33

hamish225: im just a little concerned, since no one seems bothered to change the default wifi passwords, perhaps they should force them to?

As Michael has said it causes more problems than it makes. By the standard you are setting all companies retailing computers should force users to buy anti-virus software before the computer will work.
At the end of the day the security risks or precautions you choose to take are your own and it is not the responsibility of a provider to dictate how you use the services you pay for (short of policing illegal activities where viable).

Ragnor

8033 posts

Uber Geek

Trusted

# 914997 14-Oct-2013 20:02

hamish225:

should telecom be recalling these routers?

Classic case of convenience trumping security, which is a mistake!

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

Inphinity

2540 posts

Uber Geek

# 914999 14-Oct-2013 20:05

Ragnor:

Wifi disabled until you plug a computer in via lan and run a wizard choosing your own password is too hard for the masses in Telecom's/Thomson's/Technicolor's eyes....

And they're right. Breathing is almost too hard for the masses.

linw

2043 posts

Uber Geek

Subscriber

# 915015 14-Oct-2013 20:17

It's not that it is hard to change the password. The problem is them remembering it.

They can't even remember that it is on the bottom of the case!

1 | 2