Showing posts with label firmware. Show all posts
Showing posts with label firmware. Show all posts

Wednesday, August 24, 2022

The pitfalls of copy&paste

from here and here

When it comes to copying what you find online, I always advise people to learn from the code rather than simply copying it. Copying may be expedient, but it's risky too. If you don't understand the code you're copying then you run the risk of using it in inappropriate ways, including using compromised encryption keys like the folks at Hyundai appear to have done.

Thursday, May 6, 2021

Don't forget to apply updates

from here and here

If you've recently gotten yourself a Dell or even if you've had it a while, chances are the software on it is a little bit stale and it might still have this not-so-newly-discovered vulnerable firmware updater on it. You're going to want to do something about that.

Tuesday, January 5, 2021

How do you "accidentally" add hard-coded credentials?

from here and here

Believe me, I can imagine how this backdoor got added to the Zyxel firmware. In theory they may be developing the firmware with the built-in account for testing purposes and then they remove or disable that code in the final build that they intend for release. But if that's what they're doing then this mistake begs to happen over and over again.

Maybe they should make a product that's testable in it's final releasable form instead.