Hacker News Reader

Comment by tomschlick | Hacker News Reader

Does this affect their Surboard line? Specifically the SB6141? Its probably the most popular modem for people who don't wanna rent one from their provider.

View on HN

Using this[1] humorous but still mostly effective methodology, that model seems to be okay[2], at least for now.

[1] https://twitter.com/todb/status/648956328292057088

[2] http://www.rapid7.com/db/search?utf8=%E2%9C%93&q=SB6141&t=a

I like the idea of search metasploit and I'll be making use of it, but the models mentioned in the article aren't in metasploit's database yet either. So while it is a good step, it is not very conclusive.

Doesnt look like it. Likely part of the reasoning is that the 6580 has a full router built in and the 6141 is just a cable modem. I believe they both run different firmwares as well. Also, that 600k number would be in the millions if it effected the 6141- Its standard issue for many ISP's with the higher bandwidth packages now if you dont buy voip.

Also, the URL http://192.168.100.1/cgi-bin/tech_support_cgi is not present on the 6141's

I know the Surfboards originated from Motorola, so there's a faint hope that they're okay...

I bought mine from Target 3 months ago and it still looks like it is running Motorola firmware even though it has an Arris logo stamped on the front of the device.

https://s3.amazonaws.com/tomschlick-screenshots/BGYfaCbLVEsB...

Yep, they still run Motorola firmware.

I discovered a few months ago Comcast is able to push firmware updates to customer owned modems without permission. So even if the backdoor is not present now there is no way to trust it will never be pushed to the devices.

Thats worrisome. I knew they could ping for info/reboot it but had no idea they had write access to the device.

Cable modems are based on a pre-Carterphone philosophy that the modem is an extension of the ISP and is completely owned (and 0wned), configured, updated, etc. by the ISP. They let you buy your own, but that doesn't change the protocol.

Makes sense. If they were to update something in their auth protocol or need to patch a security issue most people wouldn't have the tech chops to update firmware.

It should be auto-update but with the option to disable updates. So only technical people will turn that off.

How does this change anything? You can accept the update, or just let it will stop working with their network. And how is the new update any different in terms of trust than the initial carrier-specific update the modem gets when you activate?

From what I've seen, most ISPs running DOCSIS networks are able to do this with CPE (Customer Premises Equipment.)

Reply on news.ycombinator.com