French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Poll

How do you usually divide up your Humble Bundle payments?:

Shout box

You're not permitted to post shouts.
MaskedPixelantehttp://i5.minus.com/iN5o9iu1ON2NG.jpg "It cursed my gear? WHY WOULD IT DO THAT?! THIS GAME IS BUGGED!"04/24/2014 - 9:51pm
Matthew Wilsonthe lose of nn would not be good for us, but it will not be good for verizion/comcast/att in the long run ether.04/24/2014 - 2:16pm
Matthew Wilsonsadly yes. it would take another sopa day to achieve it.04/24/2014 - 2:13pm
NeenekoI am also confused. Are you saying NN would only become law if Google/Netflix pushed the issue (against their own interests)?04/24/2014 - 2:10pm
E. Zachary KnightMatthew, you are saying a lot of things but I am still unclear on your point. Are you saying that the loss of Net Neutrality will be good in the long run?04/24/2014 - 2:06pm
Matthew WilsonOfcourse it does I never said it did not.though over time the death of NN will make backbone providers like Google, level3 and others stronger becouse most isps including the big ones can not provid internet without them. they can peer with smaller isps04/24/2014 - 1:54pm
E. Zachary KnightMatthew, and that still plays in Google's favor over their smaller rivals who don't have the muscle to stand up to ISPs.04/24/2014 - 1:45pm
Matthew Wilsongoogle wont pay becouse they control a large part of the backbone that all isps depend on. if verizon blocks their data, google does the same. the effect is Verizon loses access to 40% of the internet, and can not serve some areas at all.04/24/2014 - 1:14pm
Neenekolack of NN is in google and netflix interest. It is another tool for squeezing out smaller companies since they can afford to 'play'04/24/2014 - 12:57pm
Matthew WilsonI have said it before net nutrality will not be made in to law until Google or Netflix is blocked, or they do what they did for sopa and pull their sites down in protest.04/23/2014 - 8:02pm
Andrew EisenGee, I guess putting a former cable industry lobbyist as the Chairman of the FCC wasn't that great of an idea. http://www.nytimes.com/2014/04/24/technology/fcc-new-net-neutrality-rules.html?_r=204/23/2014 - 7:26pm
Andrew EisenIanC - I assume what he's getting at is the fact that once PS3/360 development ceases, there will be no more "For Everything But Wii U" games.04/23/2014 - 5:49pm
Andrew EisenMatthew - Yes, obviously developers will eventually move on from the PS3 and 360 but the phrase will continue to mean exactly what it means.04/23/2014 - 5:45pm
IanCAnd how does that equal his annoying phrase being meaningless?04/23/2014 - 5:09pm
Matthew Wilson@Andrew Eisen the phrase everything but wiiu will be meaningless afer this year becouse devs will drop 360/ps3 support.04/23/2014 - 4:43pm
Andrew EisenFor Everything But... 360? Huh, not many games can claim that title. Only three others that I know of.04/23/2014 - 3:45pm
MaskedPixelantehttp://www.joystiq.com/2014/04/23/another-world-rated-for-current-consoles-handhelds-in-germany/ Another World fulfills legal obligations of being on every gaming system under the sun.04/23/2014 - 12:34pm
Matthew Wilsonhttp://arstechnica.com/gaming/2014/04/steam-gauge-do-strong-reviews-lead-to-stronger-sales-on-steam/?comments=1 Here is another data driven article using sales data from steam to figure out if reviews effect sales. It is stats heavy like the last one.04/23/2014 - 11:33am
Andrew EisenI love RPGs but I didn't much care for Tales of Symphonia. I didn't bother with its sequel.04/23/2014 - 11:21am
InfophileIt had great RPGs because MS wanted to use them to break into Japan. (Which had the side-effect of screwing NA PS3 owners out of Tales of Vesperia. No, I'm not bitter, why do you ask?)04/23/2014 - 10:52am
 

Be Heard - Contact Your Politician