Home » 

UK ISP News Archives

 » 
Sponsored

ISP Kicks Customer For Exposing Security Flaw

Posted: 18th Apr, 2007 By: MarkJ
The 24Mbps ADSL2+ offering UK ISP 'Be' (BeThere) has kicked one of its customers, Sid Karunaratne, after he revealed a little too much about one of the providers security vulnerabilities:

BeThere took the retaliatory action four weeks after subscriber Sid Karunaratne demonstrated how the ISP's broadband routers can be remotely accessed by anyone curious enough to look for several poorly concealed backdoors. The hack makes it trivial to telnet into a modem and sniff users' VPN credentials, modify DNS settings and carry out other nefarious acts.

Alas, Karunaratne's February 22 posting originally included the specific password needed to carry out the attack - a tack from the "full disclosure" school of vulnerability reporting that is considered a no-no in many security circles. Less than 48 hours later, he removed the password information, but that didn't stop the ISP from exacting its retribution.

"We have carried out a full and diligent investigation into the alleged breach and your posting relating to it," a BeThere email informed Karunaratne. "Based on that investigation, we do not believe that there was (prior to your post) any such security breach. Therefore, the passwords could only have been obtained through illegal means (i.e. by hacking)."

The ISP also threatened Karunaratne with legal action if he attempted further accesses to their network or revealed more details to the public. Sadly the vulnerability itself still exists and 'Be' is busy working on a way to plug it without disrupting subscriber services.

The Register's coverage of the incident makes for an interesting read and while the ISP’s response may have been harsh, Karunaratne should never have revealed the password itself.
 Latest UK ISP News
 Cheapest Superfast Broadband ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • NOW £20.00
    Speed 36Mbps, Unlimited
    Gift: None
  • Shell Energy £21.99
    Speed 35Mbps, Unlimited
    Gift: None
  • Vodafone £22.00
    Speed 38Mbps, Unlimited
    Gift: None
  • Plusnet £22.99
    Speed 36Mbps, Unlimited
    Gift: £70 Reward Card
Large Availability | Compare More ISPs
 Cheapest Ultrafast Broadband ISPs
  • Gigaclear £17.00
    Speed: 200Mbps, Unlimited
    Gift: None
  • Community Fibre £20.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • Hyperoptic £22.00
    Speed: 158Mbps, Unlimited
    Gift: None
  • Virgin Media £25.00
    Speed: 108Mbps, Unlimited
    Gift: None
  • Vodafone £25.00
    Speed: 100Mbps, Unlimited
    Gift: None
Large Availability | Compare More ISPs
Promotion
Cheapest Superfast ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • NOW £20.00
    Speed 36Mbps, Unlimited
    Gift: None
  • Shell Energy £21.99
    Speed 35Mbps, Unlimited
    Gift: None
  • Vodafone £22.00
    Speed 38Mbps, Unlimited
    Gift: None
  • Plusnet £22.99
    Speed 36Mbps, Unlimited
    Gift: £70 Reward Card
Large Availability | View All
Cheapest Ultrafast ISPs
  • Gigaclear £17.00
    Speed: 200Mbps, Unlimited
    Gift: None
  • Community Fibre £20.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • Hyperoptic £22.00
    Speed: 158Mbps, Unlimited
    Gift: None
  • Virgin Media £25.00
    Speed: 108Mbps, Unlimited
    Gift: None
  • Vodafone £25.00
    Speed: 100Mbps, Unlimited
    Gift: None
Large Availability | View All
Helpful ISP Guides and Tips
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
Promotion
The Top 20 Category Tags
  1. FTTP (4116)
  2. BT (3152)
  3. Politics (2118)
  4. Building Digital UK (2026)
  5. Openreach (1969)
  6. FTTC (1922)
  7. Business (1834)
  8. Mobile Broadband (1606)
  9. Statistics (1510)
  10. 4G (1379)
  11. FTTH (1371)
  12. Virgin Media (1277)
  13. Ofcom Regulation (1241)
  14. Fibre Optic (1235)
  15. Wireless Internet (1234)
  16. Vodafone (927)
  17. EE (906)
  18. 5G (898)
  19. TalkTalk (821)
  20. Sky Broadband (787)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules