Flaw could expose ‘millions’ of home routers
Millions of household routers are susceptible to a flaw that creates a handy means for hackers to hijack surfing sessions or hack into home networks.
Oh noes! its the end of the interw3bz! :O
Article: http://www.theregister.co.uk/2010/07/19/home_router_hack/
Craig Heffner, a researcher at security consultancy Seismic, is due to detail the flaw and release a proof-of-concept tool at the Black Hat conference in Vegas later this month. The DNS rebinding-related security flaw affects kit from Linksys Belkin and Dell, among others.
DNS rebinding have been around for years. Heffner claims he has discovered a new variant of the theme, which initially involves luring a surfer into visiting a website containing malicious code. This code uses a “Jedi-mind trick” to circumvent the same-origin policy, thereby allowing JavaScript-based malware to penetrate private home networks supported by vulnerable hardware.
So HackTalk’ers give us your questions and thoughts about this!
WizZ ~ HackTalk Security Team
