French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
SleakerGamestop articles popping up everywhere about their ludicrous new Credit card offerings at a whopping pre-approval for 26.9% APR07/29/2014 - 10:19pm
Matthew Wilsonhttp://arstechnica.com/tech-policy/2014/07/podcasting-patent-troll-we-tried-to-drop-lawsuit-against-adam-carolla/ the podcasting patent troll scum is trying to turn tail and run.07/29/2014 - 9:50pm
MaskedPixelanteOf course it's improved. At launch, Origin was scanning your entire hard drive, but now it's just scanning your browsing history. If that's not an improvement, I dunno what is!07/29/2014 - 8:59pm
Papa Midnighthttp://www.escapistmagazine.com/articles/view/video-games/columns/experienced-points/12029-Has-EAs-Origin-Service-Improved-Any-Over-the-Last-Two-Years07/29/2014 - 8:25pm
Sora-ChanSo it's just a matter of having better emulation software. If it can be done with a 3DS game, with all the memory and what not it takes up, it can be done with a GBA title through emulation.07/29/2014 - 7:30pm
Sora-ChanOther VC titles for the NES and Gameboy had the same setup where you couldn't access the homescreen without quitting out of the game til a later update when those games were released for the public outside of the founder program.07/29/2014 - 7:28pm
Sora-Chanthe 3DS can, and does, run GBA games, as seen by the founder gifts, which included a number of GBA titles. As for running GBA games and still having access to the home screen, I beleive it's more of the game emulation software needs to be updated.07/29/2014 - 7:27pm
Matthew Wilsonthe 3ds already swaps os's with the original ds. plus I dont think people expect miverse interaction when playing a gba game.07/29/2014 - 6:06pm
MaskedPixelanteBut that's not the issue, the 3DS is perfectly capable of emulating GBA games. The problem is that it doesn't have enough available system resources to run it alongside the 3DS OS, and thus it doesn't have access to stuff like Miiverse and save states.07/29/2014 - 5:45pm
Matthew WilsonI am well aware that it requires more power, but if a GBA emulator could run well on a original psp, than it should work on a 3ds.07/29/2014 - 5:36pm
ZenThe reason the SNES could run Gameboy, or the Gamecube could run GBA was because their adapters included all of the necessary hardware to do it in the respective add-ons. The systems were just conduits for control inputs and video/sound/power.07/29/2014 - 4:51pm
ZenMatthew: Emulation takes more power than people realize to run a game properly. You can make something run on less, but Nintendo...as slow as they are at releasing them..makes them run as close to 100% as possible. Each game has its own emulator for it.07/29/2014 - 4:47pm
Matthew Wilsonkind of hard to believe since the 3ds is atleast as powerful as the gamecube hardware wise.07/29/2014 - 4:27pm
MaskedPixelanteYes, the 3DS has enough power to run 16-bit emulators, but not at the same time it's running the 3DS systems themselves. You could run the games, but you wouldn't get save states or Miiverse.07/29/2014 - 4:04pm
InfophileRunning GBA on 3DS shouldn't be hard. The DS had flashcarts sold for it that added just enough power to emulate GBA and SNES games, so the 3DS should have more than enough natively.07/29/2014 - 3:37pm
MaskedPixelanteIt's a bunch of people whining about boycotting/pirating Trails in the Sky FC because XSEED didn't license the Japanese dub track, which consists of about 10 lines per character.07/29/2014 - 11:27am
Sleaker@MP - devolver Digital issued a twitter statement saying they would replace the NISA pledge.07/29/2014 - 10:57am
E. Zachary KnightIs that a discussion about RIAA member music labels?07/29/2014 - 10:48am
MaskedPixelantehttp://steamcommunity.com/app/251150/discussions/0/43099722329318860/ In this thread: Idiots who don't understand how licensing works.07/29/2014 - 9:20am
MaskedPixelantehttp://www.joystiq.com/2014/07/28/gaymerx-in-dire-straits-after-nis-america-allegedly-backs-out-of/ NISA backs out of GaymerX support, but it seems like the only people crying foul are GaymerX.07/29/2014 - 6:30am
 

Be Heard - Contact Your Politician