Hacker News Reader

It relies on the fact that the router web admin page is unsecured and someone hasn't changed the default password. I'm pretty certain this could also work on linksys:linksys or admin:password default login routers.

So if you don't want to be hacked, change your password.

View on HN

you don't even need the password. Some routers display it on the admin page before login in (dd-wrt does this).

That behavior can easily be toggled on/off in the Administration->Management section for your DD-WRT router. Take a look at "Info Site Password Protection" and "Info Site MAC Masking" on that page.

At least for me, dd-wrt only displays it for connections coming from "inside".

For connections coming from outside it forwards it to the DMZ computer, or blocks it.

Reply on news.ycombinator.com