French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Poll

Which Feminist Frequency video are you looking forward to most?:

Shout box

You're not permitted to post shouts.
Matthew Wilson@Monte Nintendo is a Japanese company though. consoles are dead in japan. ps sony is a international company, so they do not much care about Japanese sales much.01/30/2015 - 10:11pm
MonteOnly one generation ago nintnedo had the best selling console. They know their games are still popular and can move their hardware. They just need to focus on better gaming hardware and advertising (their youtube policy not helping)01/30/2015 - 9:58pm
MonteI'd expect Nintendo to keep making consoles, much like the gamecube i doubt nintendo will see the Wii U as a sign of the end for consoles. There are multiple reason why the Wii U failed a big one being marketting.01/30/2015 - 9:55pm
Wonderkarpwhen asked on Twitter, the Chairman said He couldnt comment at this time https://twitter.com/siloraptor/status/561284497275367424. still looking for facts01/30/2015 - 9:41pm
Wonderkarphttp://pressfarttocontinue.com/2015/01/30/igda-puerto-rico-closed/ this is what I have so far01/30/2015 - 9:27pm
Wonderkarpso allegedly, IGDA has closed their Puerto Rico branch. This comes after the Chairman of the Puerto Rico branch was blocklisted by Randi Harper. I'm trying to dig up more info on it. all I have is a link with some info, but its not cited.01/30/2015 - 9:27pm
Andrew EisenSo, kinda like the Wii U just with a GamePad that's portable?01/30/2015 - 9:13pm
Matthew Wilson@AE I hope they do a Ipad/iphone thing. make a home console/handheld where games are playable on both. that is what I would want from them.01/30/2015 - 9:00pm
Andrew EisenThat would be a shame but as long as I can play comfortably on my TV I'll probably be fine with whatever the future brings.01/30/2015 - 8:56pm
Matthew Wilson@AE I would get used to it. I do not think nintendo is going to do another home console , but I suspect a hybrid one. 1. they are doing worse than the gamecube. 2. the home console market is dead in japan. even the ps4 isnt selling there.01/30/2015 - 8:54pm
Andrew EisenAside from that (and the aiming isn't too smooth but it's turn based so it's not a big deal (maybe better with Circle Pad Pro or New 3DS?)) my only other quibble is I'd much prefer playing it on a console. But I say that about nearly every handheld game.01/30/2015 - 8:39pm
Andrew EisenFrom what I've seen of Valkyria Chronicles, this is significantly slower. Mechanically, it's fine and plays into the game well. It just takes too long.01/30/2015 - 8:37pm
Matthew Wilsonyup like VC it moves every enemy each turn one by one.01/30/2015 - 8:33pm
Andrew EisenI played most of the Codename Steam demo. Pretty neat so far but the enemy turn (it's turn based) takes way too long.01/30/2015 - 8:31pm
Goth_SkunkJust finished the first episode of Life is Strange. The writing is hit-or-miss, the lip-syncing is awful (but I can't fault an indie dev for that), but the chronokinesis mechanic is dynamite. Love the concept. Can't wait to play more.01/30/2015 - 8:23pm
Andrew EisenNintendo invites disaster!01/30/2015 - 7:34pm
TechnogeekRelevant links: http://www.nj.com/hudson/index.ssf/2015/01/apex_2015_video_gaming_tournament_at_secaucuss_emp.html http://www.ign.com/articles/2015/01/30/apex-2015-smash-bros-tournament-resumes-after-short-delay01/30/2015 - 7:29pm
TechnogeekApparently, this was the first SSB tournament to actually be sponsored by Nintendo; the upcoming Wii U title Splatoon was even going to be demoed there.01/30/2015 - 7:29pm
TechnogeekMore "game" related than "politics" related, but still noteworthy: the Apex 2015 Super Smash Brothers tournament was forced to relocate after the fire marshal demanded an evacuation due to building damage caused by the recent winter storm.01/30/2015 - 7:28pm
Wonderkarpgot my Reading Rainbow kickstarter rewards....I cant tell if this is a sticker or a bumper sticker.01/30/2015 - 5:38pm
 

Be Heard - Contact Your Politician