ARTICLE - openwrt/dd-wrt based modem/router vulnerability?

[Brian Chabot]

Tom Wittbrodt wrote:

> I admit I didn't read the fine print when I signed up with Verizon for 
> DSL service but I wasn't aware the company providing my DSL service 
> could push changes like this to my router without my involvement. 

For what it might be worth, when I signed up for Speakeast DSL, they had 
the option of the customer taking control of the CPE.  It technically 
voided any support of it the company was obliged to give (they did still 
give support in practice), but you got FULL control.

With my starting of Just Works, I was forced to use Comcast as the only 
viable ISP available.  (No DSL service, no FIOS available, Cell WANs and 
Satellite systems no viable...)  When I set up my Comcast Business line, 
I was pleasantly surprised that the support guy offered to set the modem 
to route my static IP straight to my WRT54GL.  This gave me complete 
control over my connection to the outside world without having to do any 
extra layers of IANA reserved network space.  I did a happy dance 
knowing I had complete control over my own network.  (And no, the router 
is not accessible from outside... not directly at least.  I set up an 
port forward on a non-standard port to an other SSH server internally 
for LAN access from outside. All passwords are at least moderately strong.)


Brian
-- 
---------------------------------------------------------------
| brian at datasquire.net Proprietor: http://www.JustWorksNH.com |
|         Computers and Web Sites that JUST WORK              |
|   Work: +1 (603) 484-1461    Home: +1 (603) 484-1469        |
---------------------------------------------------------------