Google OnHub Router Is Actually A Chromebook

In August, Google announced its first own wifi router, the OnHub, which is manufactured in cooperation with TP-Link. Hackers from Exploitee.rs have disassembled the device and discovered that it is actually a Chromebook, only without screen and keyboard.

Then the flash memory of the router was read. Not only showed that the image of the flash memory in which a Chromebook agreed, this was also true for the architecture of the OnHub. The next step was hacking the router, but this proved more difficult than initially expected. For the hackers to a "hidden" switch on the bottom of the OnHub found which is hidden with a screw.

Through this switch router in the Developer Mode can be started, but this requires a special key. The documentation ChromiumOS, which forms the basis for what ChromeOS is again the Chromebook operating system, found that using Ctrl + D Developer Mode could be started.

Ultimately, the hackers also managed to boot the router from a USB image and they could eventually gain superuser privileges. "The Google OnHub is within a Chromebook without screen and adapted as a router, our root method is a modified version of the boot in Developer Mode," the hackers. The OnHub is currently only in the US and Canada to order and costs 200 dollars.

Millions Of Routers Vulnerable To Criticism NetUSB Leak

A critical vulnerability in a component that "USB over IP" functionality to routers offers ensures that millions of routers at risk. Before warns security firm SEC Consult . The vulnerability is present in the NetUSB software of the Taiwanese Kcodes.

NetUSB via USB devices such as printers, external hard drives and USB sticks that are connected to a Linux-based embedded system, such as a router or access point, are accessible via the network. For this load a Linux kernel driver that starts a server on port 20005. Standard was the feature on all devices examined on SEC Consult.

Using the vulnerability, an unauthenticated attacker got on the local network to cause a buffer overflow resulting in a Denial of Service or in the worst case, the execution of arbitrary code. In some devices, it is also possible for a remote attacker to execute arbitrary code and thus take over the device.

The problem is a large number of manufacturers, including Netgear, TP-Link, Zyxel and D-Link and probably Western Digital, and Sitecom TRENDnet. The complete list of manufacturers in the advisory to find. Users are advised to install new firmware, if available. Other solutions are blocking port 20005, or disable "USB device sharing".

Anonymous Paralyzes Israeli Government Sites

New massive computer attack against Israel: dozens of websites are running in slow motion. The Anonymous logo on the hacked pages.

Hackers, claiming to solidarity with the Palestinian people , attacked Tuesday, as last year at the same time, dozens of Israeli websites.

Most government websites were bombarded with access requests, causing heavy delays in their operation, but not failure itself.

Several private sites have also been targeted by hackers.

The logo of Anonymous and that of AnonGhost appeared on the hacked pages, accompanied by a message in Arabic and English:

"We are AnonGhost, we are always there to punish you! We are the voice of Palestine and we will not be silent! (...) Our main target is Zionism and 'Israhell.'"

The attack became annual entitled #OpIsrael , was announced several days ago by a video threatening an "electronic holocaust" .

D-Link Routers Vulnerable To DNS Hijacking

Different routers network manufacturer D-Link contains a vulnerability which can modify a remote attacker without credentials the DNS settings of the devices. This allows the attacker to the movement of the hacked router running through its servers, reports PC World .

The vulnerability is in the ZyNOS router firmware, developed by manufacturer ZyXEL. In addition to D-Link's firmware is also used by other manufacturers, including TP-Link and ZTE. Through the leak is possible to get without a valid username and password to access the administration interface. The problem is both an administrative interface that is directly accessible via the Internet as an interface that is only accessible locally. In the latter case an attacker to perform a CSRF attack.

Once access to the interface, the attacker could change the DNS settings. The Domain Name System (DNS) is similar to the directory and translates among other domain names into IP addresses. The DNS hijacking an attacker can manipulate the movement of users. It is believed that the leak in the D-Link DSL-2740R and the D-Link DLS 320B. Both models are sold in the Netherlands, where the DLS 320B still being offered.

Researcher Todor Donev, who noticed the problem reported this to manufacturer D-Link, so there is no update available yet.Moreover, the DSL-2740R is a phased model. Donev opposes Threat Post that other models are vulnerable, but he does not have the resources to test all affected devices. Meanwhile, he has also put an exploit online to demonstrate the attack.