router logins

[P924]

I'm aware.. but then your saying a strong WPA2 key is pointless.

Attacks on WPA2 is still dictionary-based, so a stronger and longer password would make it very difficult to break in any reasonable time (unless you start using GPU based attack). So for now, it should be safe enough for most people. Jusp make sure to completely disable WPS.

 

[LemonScrub]

LMFAO XD love people like you it gives me hours of entertainment value. There are so many reasons it is just stupid to keep your admin passwords default on any device it is silly!

I am pretty sure you have some other vulnerable system on your network. Let me put it to you like this. If you are to lazy to change your default password and you are talking about your WPA2 security on your wireless. I can deduct that you propably have a relatively modern adsl modem. That supports WPS and that i can rape your whole network with my reaper.

Dont be stupid.

Just change the password to something with 8 characters( uppercase number and special character NOT Password!1 something stupid like that).

Dont act like you know me.. i asked a simple question. none of my passwords are default, nor do i have WPS enabled.

 

[DrJohnZoidberg]

Fail thread.

 

[LemonScrub]

Attacks on WPA2 is still dictionary-based, so a stronger and longer password would make it very difficult to break in any reasonable time (unless you start using GPU based attack). So for now, it should be safe enough for most people. Jusp make sure to completely disable WPS.

i have a strong WPA2 key, and WPS is disabled, along with UPNP etc. and no passwords are default.. My whole argument is, even with a strong WPA2 key, WPS disabled. Why would one need a strong admin password?, when just changing from the default is enough

 

[eCliPSe]

over this stupid thread

 

[RoganDawes]

i have a strong WPA2 key, and WPS is disabled, along with UPNP etc. and no passwords are default.. My whole argument is, even with a strong WPA2 key, WPS disabled. Why would one need a strong admin password?, when just changing from the default is enough

You are right. In the home environment, assuming no remote access (insecure wifi, remote admin on the router), simply changing the password from the default is likely to be good enough.

However, if it takes an extra 3 seconds to choose a GOOD password (as opposed to a merely different password), what are you really losing?

 

[MyWorld]

It is changed.. my argument is, in a home environment why do you need to make the router admin login strong, when just changing from the default is good enough? Especially if its just you and your wife on the network

It is people like this that makes if "fun" on the interwerbz. Let me take a guess, your personal details (banking, passwords and sensitive information) is not encrypted on your PC right? When last did you update your router firmware?
A couple of years back we had a ball obtaining and resetting hundreds of router ISP details. Between us we had way over a hundred accounts.
War-driving, those were the days...

It takes quite a bit longer to secure all your ports, make sure your firewall drops undesired requests, etc, why not just take a couple of seconds and change the user/password.

See it like a gate with locks, the more locks the longer it will take to force open the gate.

All you need to do is make one mistake, only one mistake in your router and firewall setup and you are done for, therefore, pile on the "locks"!

If someone wants in they will eventually get in, but making it harder discourages the faint of heart.

If you are still not convinced, Google "remote management vulnerability" for your router. Netgear, DLink, Linksys, most of them had a bug one time or another.

 

[RyanPCMR]

@LemonScrub: You could have just read up some more on the forum before posting since most of what you ask has most probably been discussed in another thread already. Sorry for sounding cold, it is not meant that way but merely sound advice from a fellow forum member.

On another note what I do to ensure extra security is to use usernames and passwords using random characters that I cannot remember and changing the passwords every few months. Also to secure your wireless network even further you can disable the broadcasting of the SSID of the network. You will never be too secure so even filtering MAC addresses could also be looked into although it is not something I particularly like to do.

Also if you have concurrent dual band wifi and you are not using the one band, please disable it since it makes your router work even harder therefor you can ultimately shorten the lifespan of your current router.