DD-WRT is vulnerable

[mubs]

Back door to complete control

 

[ddrueding]

Update

DD-WRT developer Sebastian Gottschall just emailed to say an interim fix is available here. "Consider that this exploit was released without any Report to us," he added.

Sucks. At least it requires action on the part of someone inside. This makes most of my builds safe, as there are no users on the inside (Smoothwall for that).

 

[Stereodude]

All the more reason to use Tomato.

 

[ddrueding]

...if Tomato happens to have the features you want...

 

[Howell]

Is anyone else but me using x-wrt? Otherwise known as OpenWrt White Russian - With X-Wrt Extensions.

 

[ddrueding]

Is anyone else but me using x-wrt? Otherwise known as OpenWrt White Russian - With X-Wrt Extensions.

I had never heard of X-WRT. I'll have to check it out.

 

[sechs]

...if Tomato happens to have the features you want...

Like a name that's an actual English word?

 

[ddrueding]

Like a name that's an actual English word?

While the performance benefits of that are well known, I think I can do without

 

[Gilbo]

All mine had remote administration shut off, so it looks like I should be okay. I've done remote upgrades of all of them now (I do remote administration through a web-browser on a box inside using NX).

Good times...

 

[sechs]

While the performance benefits of that are well known, I think I can do without

Being user friendly is more than half the battle.

But, you've already said that you can do without.