French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
james_fudgeI wish I could like that last shout.10/01/2014 - 5:48pm
MechaTama31Tried out Sims 4 on my brother in law's pc. Promptly got my sim exhausted, to soil himself, then sent him without cleaning up to mock people at the museum. Good times...10/01/2014 - 5:33pm
E. Zachary KnightSo they figured out how to share CPU cycles between pools and their advanced emotions engine? Sweet.10/01/2014 - 2:53pm
MaskedPixelantehttp://www.joystiq.com/2014/10/01/ghosts-pools-darth-vader-coming-to-the-sims-4/ Pools no longer impossible.10/01/2014 - 2:06pm
james_fudgeDon't eat angry.10/01/2014 - 1:49pm
E. Zachary KnightI am pretty hungry. I feel like I could smash some supper. Not sure if I am up for making a collage though.10/01/2014 - 1:00pm
Matthew Wilsonhttps://www.facebook.com/SmashBrosEN/events What a weird idea. Nintendo will be bringing Supper smash brothers for 3ds and wiiu to collage football games.10/01/2014 - 12:52pm
PHX CorpI'll give the hosting 2 Streams on twitch a spin during extra life marathon10/01/2014 - 12:41pm
james_fudgequiknkold:: oh yeah which games?10/01/2014 - 11:20am
Andrew EisenInfophile - Your comment is on the second page. Scroll to the bottom and click "Previous Entries."10/01/2014 - 9:55am
MaskedPixelantehttps://time.com/3450854/amc-netflix-imax-crouching-tiger-hidden-dragon-boycott/ Theatres refuse to show the new Crouching Tiger movie because... well, I'm sure they've got a good PR spin reason, pick one.10/01/2014 - 9:06am
IanCForza Horrizon 2 isn't even out yet, but theres already a 31 car DLC pack, along with a season pass....10/01/2014 - 8:42am
quiknkoldstarting my Halloween Spooktacular Stream today. Every day from 7-11, I'm going to be streaming Spooky games on Twitch.10/01/2014 - 8:37am
MaskedPixelanteSteam is going to start charging us Canadians in CAD. This is bad news... for people who don't use key sellers like GMG and GamersGate.10/01/2014 - 7:23am
InfophileSomething weird was going on with that comment. As soon as I posted it, it looked like it had replies from the past. And now I can't even find it. Ah well, it was getting off-topic for that thread anyway.10/01/2014 - 4:29am
Sleaker@CraigR been using Win8.1 for a while, I don't really see any usability difference between it and 7 (Work uses 7)10/01/2014 - 2:16am
Craig R.Ok, my internal debate was short-lived. If Win10 is still a year out, I'm not waiting that long for an SSD, so on Win7 I will remain.09/30/2014 - 7:52pm
Matthew Wilsonits called windows 10, and I am happy to get the start menu back.09/30/2014 - 7:18pm
Jessy HartIs this stuff about Windows 10 legit? Is it actually called Windows 10 or is it just some stupid joke?09/30/2014 - 6:57pm
ZippyDSMleeSo I been trying to play Bioshock Infinite I got all the DLC,ect but do not want the extras to make your charatcer over powered from the start.....they force you to take them which is quite annoying......09/30/2014 - 6:45pm
 

Be Heard - Contact Your Politician