PDA

View Full Version : Novatel's MiFi devices shown to be incredibly useful, easily hacked (video)



allaboutsymbian
January 18th, 2010, 14:05
http://www.blogcdn.com/www.engadget.com/media/2010/01/mifi-hack-20100118-460.jpg (http://www.ngenuity.org/wordpress/2010/01/14/mifi-geopwn-gps-info-via-xsscsrf/)
We've personally experienced the joys of portable wireless routers like Novatel's MiFi (http://www.engadget.com/tag/novatel,mifi), little things that do the 3G talkin' for you, but from what we're seeing here current users may be about to experience something altogether different: fear. A hack that is both very nasty and easy to execute has been shown which would, most troublingly, allow a malicious page to modify the MiFi settings on behalf of the user, possibly disabling security or even locking out the owner of the router, as shown in a quick demonstration video after the break. A factory reset fixes it all, of course, but doesn't do anything to alleviate the apparently shoddy security mechanisms at play here. Time for another firmware update, perhaps?Continue reading Novatel's MiFi devices shown to be incredibly useful, easily hacked (video) (http://www.engadget.com/2010/01/18/novatels-mifi-devices-shown-to-be-incredibly-useful-easily-hac/)
Novatel's MiFi devices shown to be incredibly useful, easily hacked (video) (http://www.engadget.com/2010/01/18/novatels-mifi-devices-shown-to-be-incredibly-useful-easily-hac/) originally appeared on Engadget (http://www.engadget.com) on Mon, 18 Jan 2010 08:59:00 EST. Please see our terms for use of feeds (http://www.weblogsinc.com/feed-terms/).


Permalink (http://www.engadget.com/2010/01/18/novatels-mifi-devices-shown-to-be-incredibly-useful-easily-hac/) http://www.blogsmithmedia.com/www.engadget.com/media/post_label_VIA.gifBoy Genius Report (http://www.boygeniusreport.com/2010/01/17/novatel-mifi-mobile-hotspot-security-vulnerabilities-uncovered/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:%20TheBoyGeniusReport%20%28Boy%2 0Genius%20Report%29&utm_content=Google%20Reader) | http://www.blogsmithmedia.com/www.engadget.com/media/post_label_source.gifnGenuity (http://www.ngenuity.org/wordpress/2010/01/14/mifi-geopwn-gps-info-via-xsscsrf/), evilpacket (http://evilpacket.net/2010/jan/14/mifi-geopwn/) | Email this (http://www.engadget.com/forward/19320697/) | Comments (http://www.engadget.com/2010/01/18/novatels-mifi-devices-shown-to-be-incredibly-useful-easily-hac/#comments)

More... (http://www.engadget.com/2010/01/18/novatels-mifi-devices-shown-to-be-incredibly-useful-easily-hac/)