U.S. government warns of hack threat to network gear

[Bosonic]

Source: Reuters

The U.S. Department of Homeland Security urged computer users on Tuesday to disable a common networking technology feature, after researchers warned that hackers could exploit flaws to gain access to tens of millions of vulnerable devices.

The U.S. government's Computer Emergency Readiness Team advised consumers and businesses to disable a feature known as Universal Plug and Play or UPnP, and some other related features that make devices from computers to printers accessible over the open Internet.

UPnP is designed to let networks identify and communicate with equipment, reducing the amount of work it takes to set up networks. Dave Marcus, chief architect of advanced research and threat intelligence with Intel's McAfee unit, said hackers would have a "field day" once the vulnerability in network devices is exposed.

"Historically, these are amongst the last to be updated and protected properly which makes them a gold mine for potential abuse and exploitation," said Marcus, who advises government agencies and corporations on protections against sophisticated attacks.

Read more: http://www.reuters.com/article/2013/01/29/us-cybersecurity-bugs-idUSBRE90S06320130129

[Duer 157099]

1. A good resource for understanding these kinds of things:

http://www.blackviper.com/

Been following his advice for years and have disabled UPnP long, long, long ago.

[longship]

4. Great DU name, 157099. nt

[EastKYLiberal]

2. I know a hacker that has been exploting these things for 10 years or more. nt

[OKNancy]

3. link suggested in the article to check

Edit: I took out that link. My AVG security said the software appeared "malicious" and would not let me download it!

[RC]

5. All you need to do is

Last edited Tue Jan 29, 2013, 04:23 PM - Edit history (1)

Right click on My Computer (XP) or Computer on Windows 7
Select Manage
Click on the plus next to Services and Applications
Click on Services
Spread out the first column so you can read it
Scroll down to Universal Plug and Play Device Host or UPnP Device Host on Windows 7
Right Select Properties
In the drop down box next to Startup Type, select Disabled
OK to back out of everything.
Done

[hr]

A good explanation and a small program that works with XP and Windows 7
You need to be an Administrator to run this program on Windows 7. Right Click and "Run as Administrator"
https://www.grc.com/unpnp/unpnp.htm

[magic59]

6. And an even easier way to turn PNP on or off is

to download a free very small program called unpnp.

[lrellok]

7. What does that turn off?

What services are disabled when you shut off the UPnP? Wireless internet? Network access? Automatic Log in to wireless?