Hacker News Reader

... only vulnerable if the default has been changed to ALLOW remote administration, and are using the default admin:admin or root:admin credentials.

View on HN

How big a group of routers is this? How does one get smart enough to go into the advanced options to enable remote administration, but not smart enough to set the root password first?

I partially blame Tomato for this. It shouldn't allow you to enable remote admin until you've changed the passwords.

Shodan returns some 5100 Tomato servers, with about 1500 running web services (presumably the remote administration). I would bet that a fair number of those 1500 servers (maybe 10%?) have the default password, but I'm not going to check.

Reply on news.ycombinator.com