{"id":2043,"date":"2016-09-30T09:04:49","date_gmt":"2016-09-30T08:04:49","guid":{"rendered":"https:\/\/www.ofcourseimright.com\/?p=2043"},"modified":"2016-09-30T13:52:49","modified_gmt":"2016-09-30T12:52:49","slug":"turning-the-home-router-from-a-threat-to-a-helping-hand","status":"publish","type":"post","link":"https:\/\/ofcourseimright.com\/?p=2043","title":{"rendered":"Turning the Home Router from a Threat to a Helping Hand"},"content":{"rendered":"

\"lybid_1002\"The Federal Communications Commission<\/a> is set to vote on a proposed rule<\/a> that would require cable companies to offer consumers more choices about whether they use a rented cable box or home router or their own.\u00a0 More choice is good, and one could make a strong argument that lack of consumer choice has retarded development of home routers.\u00a0 However, this decision may come with a few pitfalls from a security perspective.<\/p>\n

Home routers were recently a component of the attack against krebsonsecurity.com<\/a>.\u00a0 There are many reasons that this would be the case.\u00a0 Some routers have as a blank password with user name “admin” that allows anyone to access them.\u00a0 Others have well-known vulnerabilities in their software that has gone unpatched for years.\u00a0 If the service provider is providing the router, then we can say that it is responsible for the device\u2019s maintenance.\u00a0 On the other hand, the consumer has a particularly bad track record of doing a good job protecting the device.<\/p>\n

Second, because most consumers do not employ security professionals to protect devices in their homes, the service provider is in a good position to offer that protection.\u00a0 It does require that the service provider have access to the home router to identify threats within the home itself.\u00a0 By having some control over that device and having access to logging information, the home router is in a position to identify potential attacks within the home itself.\u00a0 But the router itself needs some guidance to perform that task, and the router itself typically cannot retain all of the necessary knowledge.\u00a0 Cloud services are useful for this purpose, whether managed by the SP or by some other entity.<\/p>\n

Regardless of what the FCC orders, SPs are in the position of setting the standards necessary to connect a router to the Internet.\u00a0 CableLabs<\/a> has set several standards, one known as DOCSIS<\/a>.\u00a0 While the current specification has a limited security section, one could easily envision additional capabilities that would protect device within the home.\u00a0 As new entrants such as Google<\/a> and Ubiquiti<\/a> develop additional capabilities, they may have more to say about security in the home.\u00a0 If home users are to have a choice, one choice they should have is to allow service providers to protect them.<\/p>\n


\nPicture courtesy Sergiy dk on Wikimedia CC BY-SA 3.0<\/a>
\n<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"

The Federal Communications Commission is set to vote on a proposed rule that would require cable companies to offer consumers more choices about whether they use a rented cable box or home router or their own.\u00a0 More choice is good, and one could make a strong argument that lack of consumer choice has retarded development … Continue reading “Turning the Home Router from a Threat to a Helping Hand”<\/span><\/a><\/p>\n","protected":false},"author":172,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[87,9],"tags":[538,502,288,496],"class_list":["post-2043","post","type-post","status-publish","format-standard","hentry","category-internet","category-security","tag-home-routers","tag-internet","tag-malware","tag-security"],"_links":{"self":[{"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/posts\/2043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/users\/172"}],"replies":[{"embeddable":true,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2043"}],"version-history":[{"count":4,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/posts\/2043\/revisions"}],"predecessor-version":[{"id":2066,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=\/wp\/v2\/posts\/2043\/revisions\/2066"}],"wp:attachment":[{"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ofcourseimright.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}