Hacker News Reader

Surprising amount of distrust of CWMP in this thread. As someone who implemented this and manages it at an ISP we really only use it to configure the WAN or VoIP connections.

View on HN

Well yes but nothing prevents you from, for example, changing both user's passwords so they can't log in to even change WiFi password. [1]

Needless to say, I don't trust it and disable it whenever I can. I can set up my PPPoE or VoIP access myself.

[1] https://milankragujevic.com/uploads/oKazARE_.png

Yes, agreed technical people are fine. Most users struggle with basic setup so it's a win for them. Personally, why would I do anything hostile that generates support calls?

Agreed. For most people remote management is a life savior. But hostile can also be company policy, i.e. rewriting DNS servers every hour, etc.

Reply on news.ycombinator.com