Re: news story and router passwords

[Richard Johnson <rdump () RIVER COM>]

At 11:10 -0600 on 10/12/2000, Vachon, Scott wrote:
> > Frankly speaking I'd suppose that they just did not back up their >config
> :)
> > (because it looks like they even did not use access-lists etc.)
>
> > From reading the article is sounds as if a simple script kiddie found an
> easy and unprotected target. Where these fools too simple-minded to
> physically remove the stricken (and apparently blocking) gear from the
> network and rework it ?


This is apparently more difficult with an Ascend router that uses SNMP only
for configuration (no console access?), and apparently has no 'lobotomy'
switch for at least temporarily resetting to known default password or
configuration.

Still, 11 days to arrange replacement hardware is a bit severe for a
provider only half an hour away from the Denver metro area.  At least now
they know they can hit a number of locals up for emergency loaners in the
future.


Richard