Hacker News Reader

Comment by ghostly_s | Hacker News Reader

Every exploit listed for my router (tplink Archer A7) has no "affected version" listed nor indications if it has been patched, but clicking through to the CVEs indicates all have been remediated. As near as I can tell this website is just scraping CVEs, poorly, in order to sell their security services (which consist, at least in part, of an email reminder to rotate your router password...seriously?).

View on HN

OP here, Yes, I agree, we (modemly) could do better

1. Show the vulnerability status (patched / open) 2. Show affected firmware versions 3. Display manufacturer's last patch release date

Though lots of the dataset is clean, still we do lots of parsing and regexing to extract insights out of a massive haystack. The intention of this tool is for everyone to realize and keep their firmware updated

And No, we don't sell any services. The security reminder emails are free

OP here. To clarify. The affected firmware versions are always available in the detailed description text. Its just that we couldn't show them in the header due to parsing failures in few cases

A few questions.

I am guessing that very few of these can be exploited on the side that faces the public internet. True?

What percentage require access to the router via administrative login on the private network?

How many would need nothing but a hostile .exe on the private network?

How many could achieve an exploit with nothing but hostile JavaScript on the private network?

Will changing the private network away from 192.168.* to something on 10.* protect a vulnerable router from some of these exploits?

What else can be done to protect a vulnerable router?

Even so, you can forget about most of these being up to date. Even experienced IT people that update their servers religiously tend to forget the router in the closet.

so spam?

Reply on news.ycombinator.com