Jesus is that real?
The TP-Link M5350 has a XSS exploit via text message. Responds with admin password in clear text. Lovely. @internetofshitpic.twitter.com/5OkyOwXTQB
-
-
-
Yep. But I only have a link to a German article :-(https://www.heise.de/newsticker/meldung/Sicherheitsforscher-IoT-Hersteller-machen-es-Bugjaegern-unnoetig-schwer-3678493.html …
New conversation -
-
-
but where is the message/html/javascript rendered? owner's browser?
-
My understanding is whatever device you used to send the text message from.
-
That's definitely not true.
End of conversation
New conversation -
-
-
You surely can't be serious...
-
Sadly it's true.
-
and don't call me Shirley ;)
End of conversation
New conversation -
-
-
Why is your device replying via iMessage?
-
No idea. It's the screenshot the tech site used to visualize the exploit. Might be constructed.https://www.heise.de/newsticker/meldung/Sicherheitsforscher-IoT-Hersteller-machen-es-Bugjaegern-unnoetig-schwer-3678493.html …
-
yeah it is faked
-
Not sure about screenshot, but the vuln and research appears to check out at least:https://threatpost.com/travel-routers-nas-devices-among-easily-hacked-iot-devices/124877/ …
-
yeah i am just talking about the screenshot
-
Seems like with something that facepalmy one wouldn't need to doctor a screenshot for added effect. Go figure
End of conversation
New conversation -
-
-
fake screenshot (see thread) real vulnerability but lol regardless
-
Yeah, I saw. Questionable presentation choice but still hilariously bad.
End of conversation
New conversation -
-
-
- End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.