So I idly downloaded Fing to have a look what's on my network. And that got me thinking. Checking out my second router to ensure I wasn't running two separate 5Ghz wireless access points (I wasn't - had disabled the other), I saw this on the 20005 port on my NetGear router:
"20005/btx xcept4 (interacts with german telekom's cept videotext service)"
Rather weird. But I'm only scanning inside my network, so fairly happy it was nothing to sinister. Turns out it's NetGears "ReadyShare" - an implementation of file sharing over USB for your home network. It is OK, but it would be a vulnerable point if someone got into my network. As PC World said:
"The way in which vendors have implemented NetUSB in their products is egregious, Holcomb said. “For instance, hardcoded AES keys, the processing of unvalidated and untrusted data, and kernel integration are all red flags that should have been identified during the early stages of SDLC [software development lifecycle]"
It was worth the effort just to find this wonderful paragraph.
No comments:
Post a Comment