Has anyone enabled MyFritz?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Has anyone enabled MyFritz?

KiwiJaz

31 posts

Geek

#190837 14-Jan-2016 10:17

I have just purchased a Fritz!Box 7490 and would like to register for MyFritz!, however when I follow the instructions on the Fritz!Box website, I don't seem to have the 'Create a new MyFritz! account' option.

I see from previous forum postings that others have been able to do this on other Fritz!Box's.

I have the latest Fritz! OS (v6.30).

Has anyone else been able to register for a MyFritz! account?

Click "MyFRITZ!" in the "Internet" menu.
Enable the option "Create a new MyFRITZ! account".
Enter your e-mail address in the "E-mail address" field.

scottjpalmer

5973 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1470649 14-Jan-2016 11:22

I did fine with mine, was a few months ago though.

KiwiJaz

31 posts

Geek

#1470831 14-Jan-2016 13:44

Thanks for the reply.
I will try a different browser and see if I get the option to Register.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1470836 14-Jan-2016 13:50

Personally I wouldn't recommend it. It is just another way to backdoor your router if there was ever an exploit for it.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#1479441 26-Jan-2016 22:28

KiwiJaz: Thanks for the reply.
I will try a different browser and see if I get the option to Register.

Did you ever manage to register?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#1479442 26-Jan-2016 22:29

michaelmurfy: Personally I wouldn't recommend it. It is just another way to backdoor your router if there was ever an exploit for it.

Honestly?

To me it feels more like a different version of DynDNS.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1479467 26-Jan-2016 23:33

IcI:

michaelmurfy: Personally I wouldn't recommend it. It is just another way to backdoor your router if there was ever an exploit for it.

Honestly?

To me it feels more like a different version of DynDNS.

In early 2014 a vulnerability was found where MyFritz allowed people to bypass security and effectively "own" the router. In August 2015 a series of VoIP hacks happened in AU on MyNetfone and it seems almost everyone was using a Fritz!Box - including myself who run a Fritz!Box with MyNetPhone account.

You have to ALWAYS reduce the attack surface, not enlarge it. Never allows remote management from WAN, never allow remote access to the router. If you use a NAS as a router (some Synology allow this) then you should not allow web access to resources. Actually you should never allow any incoming connection to your LAN. Period.

http://www.crn.com.au/News/413727,high-risk-vulnerability-found-on-fritzbox-routers.aspx

http://forums.whirlpool.net.au/archive/2433387

http://www.sorinmustaca.com/2014/02/06/security-warning-for-all-fritzbox-users-registered-with-the-myfritz-service/

Google search

If you really want to access your files, use a cloud service and sync to it - Dropbox, OneDrive, Google Drive, etc, etc. Enable 2FA and access that instead of your network.

fe31nz

1228 posts

Uber Geek

#1481852 30-Jan-2016 15:37

freitasm:

In early 2014 a vulnerability was found where MyFritz allowed people to bypass security and effectively "own" the router. In August 2015 a series of VoIP hacks happened in AU on MyNetfone and it seems almost everyone was using a Fritz!Box - including myself who run a Fritz!Box with MyNetPhone account.

You have to ALWAYS reduce the attack surface, not enlarge it. Never allows remote management from WAN, never allow remote access to the router. If you use a NAS as a router (some Synology allow this) then you should not allow web access to resources. Actually you should never allow any incoming connection to your LAN. Period.

http://www.crn.com.au/News/413727,high-risk-vulnerability-found-on-fritzbox-routers.aspx

http://forums.whirlpool.net.au/archive/2433387

http://www.sorinmustaca.com/2014/02/06/security-warning-for-all-fritzbox-users-registered-with-the-myfritz-service/

Google search

If you really want to access your files, use a cloud service and sync to it - Dropbox, OneDrive, Google Drive, etc, etc. Enable 2FA and access that instead of your network.

And then you are just letting the the US Government have access to all your cloud files, which I suppose is a little better than letting them have access to your whole network.

There are actually pretty secure ways to allow external access to your network. I have OpenVPN set up, with large keys and the correct security. That allows me to have full access to my home network from anywhere. Also pretty safe is to allow SSH connections, but only using keys, so you have high security on the SSH connections. I do agree that opening random ports to whatever server software you are running is not so good an idea, as the server software is often not very well checked for security problems. Software like SSH and OpenVPN is very well scrutinised and while it is not impossible for there to still be flaws, any that do get found will be known about and fixed rapidly.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

KiwiJaz

31 posts

Geek

#1481886 30-Jan-2016 17:21

Sorry, thought I had replied to this thread earlier but obviously hadnt. I did manage to register it but it seemed hit and miss as to when I could access it...would often timeout.

Thanks to the helpful replies on this post, I have disabled it in the interest of security.

Thanks again for all of the posts.