French ISP Offers to Block File-Sharing, Exposes Users to Attack

French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

ECA IconA PUBLICATION OF THE ECA RSS IconSUBSCRIBE User LoginLOGIN / REGISTER

Crispy Gamer




       

GamePolitics ShoutBox

Posted 09/09/10 at 10:57am
PHX Corp: Not to mention Fucking, Austria and shitterton, England
Posted 09/09/10 at 10:55am
SimonBob: Or perhaps you'd care for a trip to scenic Dildo? ("See Also" section has even more knee-slappers.)
Posted 09/09/10 at 10:53am
SimonBob: To say nothing of Blow Me Down Provincial Park in Newfoundland.
Posted 09/09/10 at 10:03am
JDKJ: Fort Dix.
Posted 09/09/10 at 02:19am
Andrew Eisen: Were they ever officially referred to as the Taliban?
Posted 09/08/10 at 11:21pm
Cheater87: EA might of backed down and censored MOH Taliban no longer called Taliban but "insurgents".
Posted 09/08/10 at 09:31pm
PHX Corp: Kotaku's Humorus Take on the Fort Gay incident
Posted 09/08/10 at 04:38pm
PHX Corp: even though it's old There is a connection between US v stevens and EMA v California
Posted 09/08/10 at 03:51pm
Michael Chandra: Same thing as last week or not?
Posted 09/08/10 at 03:50pm
Michael Chandra: European Parliament has apparently adopted a Written Declaration that objects against the lack of transparancy.
Posted 09/08/10 at 12:19pm
Andrew Eisen: Not much worldwide: Gay, Russia. Gaywood, UK. And again, a stretch, Agay, France.
Posted 09/08/10 at 12:17pm
Andrew Eisen: Also: Gays Creek, Kentucky. Gay, West Virginia. Gaysville, Vermont. And Gaylordsville, Connecticut.
Posted 09/08/10 at 12:01pm
Andrew Eisen: In the US: Gay, Georgia. Gays, Illinois. Gayville, South Dakota. Mount Gay-Shamrock, Virginia. Gays Mills, Wisconsin. A bit of a stretch but there are also three cities named Gaylord.
Posted 09/08/10 at 11:57am
Rodrigo Ybáñez García: And still they didn´t want to lift the ban.
Posted 09/08/10 at 11:52am
Rodrigo Ybáñez García: Still, the funny part is when the mayor of the city intervined. How many cities in the world have the word gay?
Posted 09/08/10 at 11:44am
Andrew Eisen: But, according to the article, the suspension was eventually revoked.
Posted 09/08/10 at 11:35am
Rodrigo Ybáñez García: XboxLive still at it: bans a guy for living in Fort Gay, W. Virginia.
Posted 09/08/10 at 08:56am
ZippyDSMlee: Ya our colly of 12 years died a few months back and they got a puppy.....oh well the lil rat dog is cute. LOL
Posted 09/08/10 at 08:20am
pete_gallagher: @PHX Corp, sorry to hear that, condolences :(
Posted 09/07/10 at 11:20pm
PHX Corp: My Dog, sparky Just Passed away as of 12mid, of old age.
Login or register to post shouts