Відео

bdinfo doesnt provide the flash start and size info. Any ideas on how to proceed?

Thanks for another great video! Merry Christmas!

Awesome. I’ve really enjoyed this video . Congrats!

Banning. a sign of insecurity from the big brother

On national security ground??? Lolz

These chinese aren't trust worthy. Cheap character and curse to man kind

For all that you did to get a default ID and Password I an still confused to exactly what was accomplished. You have to reach the actual router to do anything with it from the Internet. In looking at the manual for this specific router Remote Access from the Internet is turned off by default. Even if it is deliberately turned on you still have the option to limit access to specific remote IP addresses. Now from the manual it says the first time you access the local router Web page you have to enter a password which then becomes the admin password for subsequent accesses. Since the router you found was accessible from the Internet someone had to have accessed the router locally already at least once to enable that remote access feature (off by default). So the router has an admin password setup locally by the time you located it with remote access enabled (or you would not have located it in the first place). We do not know if they limited remote access to specific remote IP addresses (which would be smart). Since you made no effort to actually login remotely we do not know if you would have succeeded or not.. There may be a backdoor that always allows the ID and Password you located in the firmware to login (that would be bad). The password you located may be negated once the first local access is done and a new password created (which we know was done). The router may be limiting remote access by IP address (when they enabled with remote access) even with a valid password but maybe your password bypasses that check with a back door. So the router actually seems to have pretty good access security by default. It forces you to setup a new admin password upon first local access. Remote Access is not enabled by default by the time you enable it you have a new admin password. Then it allows you to setup only specific remote IP addresses that can remote access from the Internet which if used drastically limits remote access capabilities. Now it it possible that the ID and Password you located is an unpublished backdoor that gets around the new admin password that was already set and any potential IP limitations. In actually reaching the 111.70.20.247 router Web page that you located the password 1234 that you located does not actually work showing that a new default password or remote IP limitations are in place. So unless I am missing something (and if I am please point it out if I am) everything you did will not get any access to the remotely located router you found or any other identical router model from the same vendor. From what I have read the TP-Link router hacking involves people using USB drives that unknowingly contain malware that access the router locally updating the file structure/files on the router allowing unauthorized remote access. This is a completely different method that was you are doing and can largely be stopped by having a decent Anti Virus setup that scans all inserted USB drives for known malware files.

Accidently stumbled across this delightful video and what a very pleasurable watch. By no means do i hack or have any interest in obtaining unauthorized access but more interestingly was the firmware extraction. I already do microsoldering so learning about the UART interface and chip readers is very delightful.

No-one safe these days. When big company's get hacked and your info is in their system your identity is compromised anyway.

So (as an analogy) you just spend a lot of time figuring out how exactly a door lock works....and then went out to check thousands of doors to find one door where the lock was disabled by the owner.

hit it with me analyser and that adapter for ch or the k usb wire

Rs485 terminal... Not only tp-link has it, other brands also provide this.😂

LMAO rip to all folks who invested to hundreds or thousands of money investing to DECO and OMADA

If you ban the sale of new devices, that leaves millions already deployed and a vendor with no reason to ever issue security updates for those.

Good evening, have the possibility to add Motorola chips like the 4L91N (SC515854DGCP) for the playback and programming of it, thanks for the video

Nice Job. I always disable debug Interface and console in Release Version of my Firmware 😂

try to edit your videos to reduce clutter and save viewers time

So is there really any kind of secure routers, hubs or switches that are secure?

Many years ago I owned a tplink indoors camera which was compromised by a hacker. Sitting in the living room watching tv one night when I heart a man’s voice coming from the camera on the table the tv was on. I immediately went into the app and rebooted the camera and then ran over and unplugged it and tossed it in the trash. Before rebooting the hacker was trying to speak directly to my wife by means of inappropriate sexualized comments about her body. From that day going forward I stop by cheap security cameras or products that don’t invest in security.

On the topic of zero days. In the past, I was able to utilize security vulnerabilities in the consumer-grade routers provided to businesses by ISPs to obtain network secrets (RIPv2 keys, Authentication certificates, Static IP Allocations) by using some JavaScript calls in the developer console while the router's web interface was open. Now, the exploit worked by logging in using default credentials which no one changes (!) but the information revealed wasn't visible to any account except the ISP's service account in the GUI. I used this as a reason to tell people to never use that ISP's equipment, and to never use them for Static IPs because there is little security on the network end to prevent things like IP Address space hijacking. Even the ISP's techs have indicated they've had problems with CPE that didn't get reset at the warehouse causing routing problems at new installs for them. Hardware like consumer routers are often horribly insecure because they rely on proprietary binaries for the SoC and radio drivers, and they are often built to work on older kernels and libraries. Consumer routers are lucky to see more than a few firmware updates in their lifetime. If the firmware and drivers were open for the community to develop and commit improvements to, we would have better security for these products, and better lifetime. Not for the ban, but I am open for rules on open firmware requirements and better security/update commitments.

I think they are going after TP Link because it has about 65% of the router market according to one source I read. Although the action they are contemplating might be a short term "fix", they should really go after the root cause and address all exposed IOT's.

Matt, .look for ground on electrolitic capacitor ;-)

TP-Link can only do what the CCP mandates.

Ppl that understand all this stuff are truly the most dangerous ppl. The understanding for technology is astonishing.

Not an IT person here. But WTF is US government doing by not setting and enforcing security standards in the IOT space? I don’t trust US companies much more that Chinese companies to produce secure products. Only way that will happen is if they are required to as a condition of selling here. Would like to know HOW users of TP Link devices can protect from this? Is it as simple as changing the password from factory default?

I have a tp-link AX23 wifi6 router is it too vulnerable ? And why is my iPhone saying privacy warning in WiFi settings?

So... The US Government bans the T-Plink IoT devices because of they have a default password? :D Putting your IoT devices on the internet without any protection is your fault, not the manufacturer's. lol. If you are not familiar how to setup your router, don't buy it, use router of your ISP, or call a professional.

As of 4 days ago, the US Government is CONSIDERING banning TP-Link devices. Your title is misleading.

This ban is purely political/geopolitical and has little to do with them wanting to keep us safe. If it was about safety then every router/networking company would be on the chopping block or being pressured to find a way to block these exploits.

Foreign governments pose the same threat today as they always have, and that is none. Every government spends 99% of its efforts controlling its own citizens, since they're the ones doing the work that keeps the parasites in government afloat.

Whats the best router to replace it?

man you are good

Should ban anything Chinese. If Matt can easily crack it, the Chinese can too; and they have an agenda which ain't good. Think Trojan Horse. They want our secrets; what better way.

Very good all devices like this must be banned.

Your video really got me concerned about network weakness. Never knew it to be so open.

is the security of China accessing your network the issue or only issue or is it that they will not give the US the capability to spy on you through their devices?

The reasoning for banning tplink can be used to ban other router or iot makers. Why tplink? Its more of a financial concern than a national security one. Same reason for us trying to ban dji (they own the market).

Probably less likely to be banned because the Chinese have backdoors, more because TP-Link won't provide the US government any. Same goes for Huawei and Hikvision. Who was it who had to come up with an explanation why there was an account called "nsalogin" on their hardware inventory application, and have had multiple NSA-related exploits which required patching when exposed? San Fran... something wasn't it?

I can see you love what you do - good energy - I enjoy your technical insight.

Why do you even need ground pin for UART? What happens if you don't connect it?

Every device got some how vulnerable so what it means US Device should be ban by world as well??

The voltmeter in the top left corner constantly running covering the console is just plain annoying

My concern is that most ordinary folk don't know about these vulnerabilities, and i feel there should be properly certificated hardware approvals in place before these devices are sold to the public. Ignorance is bliss.

20 minute to find admin 1234. Love it. 😂

U.A.R.T = Universal Asynchronous Receiver Transmitter

US putting backdoors into every possible piece of hardware and software: “okay” Others misconfiguring their devices: “how dare you?!!! Ban ban ban”

Just hv firmware changed 🤣😜 updated .. 😬 waits for the thrown empty beer cans to hit

What about the Home Assistant? Do they have same security loop holes?

Just politic by politician.

Who cares