U.S. government warns of hack threat to network gear
Source: Reuters
The U.S. Department of Homeland Security urged computer users on Tuesday to disable a common networking technology feature, after researchers warned that hackers could exploit flaws to gain access to tens of millions of vulnerable devices.
The U.S. government's Computer Emergency Readiness Team advised consumers and businesses to disable a feature known as Universal Plug and Play or UPnP, and some other related features that make devices from computers to printers accessible over the open Internet.
UPnP is designed to let networks identify and communicate with equipment, reducing the amount of work it takes to set up networks. Dave Marcus, chief architect of advanced research and threat intelligence with Intel's McAfee unit, said hackers would have a "field day" once the vulnerability in network devices is exposed.
"Historically, these are amongst the last to be updated and protected properly which makes them a gold mine for potential abuse and exploitation," said Marcus, who advises government agencies and corporations on protections against sophisticated attacks.
Read more: http://www.reuters.com/article/2013/01/29/us-cybersecurity-bugs-idUSBRE90S06320130129
Duer 157099
(17,742 posts)Been following his advice for years and have disabled UPnP long, long, long ago.
longship
(40,416 posts)EastKYLiberal
(429 posts)OKNancy
(41,832 posts)Edit: I took out that link. My AVG security said the software appeared "malicious" and would not let me download it!
RC
(25,592 posts)Last edited Tue Jan 29, 2013, 04:23 PM - Edit history (1)
Right click on My Computer (XP) or Computer on Windows 7
Select Manage
Click on the plus next to Services and Applications
Click on Services
Spread out the first column so you can read it
Scroll down to Universal Plug and Play Device Host or UPnP Device Host on Windows 7
Right Select Properties
In the drop down box next to Startup Type, select Disabled
OK to back out of everything.
Done
[hr]
A good explanation and a small program that works with XP and Windows 7
You need to be an Administrator to run this program on Windows 7. Right Click and "Run as Administrator"
https://www.grc.com/unpnp/unpnp.htm
magic59
(429 posts)to download a free very small program called unpnp.
lrellok
(41 posts)What services are disabled when you shut off the UPnP? Wireless internet? Network access? Automatic Log in to wireless?