[SANOG] TP-Link lose control of their domain that's used to configure CPE online

[Anurag Bhatia]

Wow !

That's unbelievable screwup !

--
Anurag Bhatia
https://anuragbhatia.com
On 06-Jul-2016 20:21, "Suresh Ramasubramanian" <suresh at hserus.net> wrote:

> According to this bugtraq post –
>
> http://seclists.org/bugtraq/2016/Jul/3
>
> They apparently used a fake domain tplinklogin.net – but forgot to
> register it in their name, and someone’s finally gone and registered it.
>
> The domain is currently parked but can potentially be bought or otherwise
> taken over by an attacker.
>
> And tp-link is an extremely common brand of wifi router sold in Indian /
> subcontinent stores.
>
> SPs may want to block traffic to the domain www.tplinklogin.net till this
> is resolved.
>
> --srs
>
>
>
> _______________________________________________
> sanog mailing list
> sanog at sanog.org
> https://lists.sanog.org/mailman/listinfo/sanog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.sanog.org/pipermail/sanog/attachments/20160706/58715afd/attachment.html>