TIL that the Verizon FIOS wifi router has a backdo...
# random
h
TIL that the Verizon FIOS wifi router has a backdoor that allows Verizon to display your wifi password, in cleartext on your profile page on their website. Shocking breach of both trust and security, all to make their lives a bit easier when people call their customer support to recover their password.
😵 1
👎 3
Trying to get them to tell me whether they cache it in a database or just read it off the router on-the-fly has been interesting
f
just the fact that they have sufficient access to even inspect the router like that is concerning
h
There is a rule in the firewall that allows this, and you can't turn it off
p
Don't use wifi routers from internet providers...
h
Seriously
Buying a proper router now
p
The Internet providers are always surprised when I refuse to let them give me a wifi router. "All I want is the best modem you've got, I'll handle the network, thanks!"
h
They don't show it if I disconnect the router, so that is evidence towards the idea that at least they're not caching the password in their database
but they are still showing me a cleartext password in the browser, so it was clear on the wire in their systems, and could easily be logged.
Just...
b
Yeah the Spectrum guy kept going on about using their modems/router combo 🙄
âž• 1
I'm paranoid about my security cameras too. I have them on a static IP which is blacklisted from all internet traffic 🙈
But hot damn, not hashing or salting? That's egregious.
h
Well they can't, the whole purpose here is to help people who can't remember their wifi password and gum up their support channels with "what is my password" requests
b
hard device reset?
h
my new internet provider didn't let me get just a modem 😞
h
I'm just going to not use their router
✅ 1
b
Obviously the only solution is to make your password extremely offensive, then call and ask what it is 😛
🙈 2
d
I used to have some slightly offensive answers for security questions. Then I had to repeat them out loud to a human being on the phone once. Now I randomly generate them all. Still weird, but not as embarrassing to read aloud.