French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Poll

Did Microsoft pay too much ($2.5 billion) for Minecraft developer Mojang?:

Shout box

You're not permitted to post shouts.
Papa MidnightKyle Orland's response: http://arstechnica.com/gaming/2014/09/addressing-allegations-of-collusion-among-gaming-journalists/09/18/2014 - 12:41pm
Papa MidnightJames, I say this as a person who has managed a gaming press website before: This article is horrendous sensationalism: http://www.breitbart.com/Breitbart-London/2014/09/17/Exposed-the-secret-mailing-list-of-the-gaming-journalism-elite09/18/2014 - 12:41pm
Krono@james I never said you did. I was responding to Andrew's statement that he'd seen a mere two articles suggesting that the term gamer was tainted, by pointing him to a list of the articles that were more or less the orgin of the idea.09/18/2014 - 12:09pm
E. Zachary KnightBut james, you replied to my tweet when I tweeted about one of those articles. That is basically the same thing as writing an editorial on GP in support of it. ;)09/18/2014 - 12:04pm
james_fudgeNot only did we not write one, we didn't cover any of them either.09/18/2014 - 11:46am
KronoThe underlying suggestion most of the articles had that gamers supporting the issue were just the young men stereotype pissed off a lot of people, and sparked the #NotYourShield tag09/18/2014 - 9:41am
Krono@andrew Just two? The whole reason #GamerGate gained real traction was that 9 op-eds including arguments to that effect dropped in 24 hours: http://markdownshare.com/view/a524affd-e679-40be-8aa1-72058065dc2a09/18/2014 - 9:38am
MaskedPixelantehttp://www.gog.com/forum/general/double_fine_abandoned_spacebase_df9_development ITT: People who don't know what Early Access is.09/18/2014 - 9:32am
ZippyDSMleeFF2/4 remake now on steam.09/18/2014 - 9:13am
james_fudgeThis what they really think of us: http://www.donotlink.com/framed?54192709/18/2014 - 9:10am
ConsterAh yes, nothing quite says "I take offense to being associated with an awful few" like siding with said awful few.09/18/2014 - 9:07am
Michael ChandraSo be smart, and if you want to be part of the good guys, separate yourself from the bad guys. Don't attack those upset you won't.09/18/2014 - 6:30am
Michael ChandraMeanwhile, Gamergate is tainted and wise people already use a different tag to defend decent arguments. Keeping it up is like going #KKK while arguing about PoC.09/18/2014 - 6:30am
Michael ChandraSo while claiming to be unfairly attacked for the actions of a selected few, you unfairly attack an entire crowd for the actions of a selected few? #notagamer #butahater09/18/2014 - 6:30am
james_fudgeQuiknkold: Let me ask you- how many of those 'gamers are dead' articles did you see here? Because apparently i'm part of some vast conspiracy.09/18/2014 - 5:18am
NeenekoAh, that old straw man. That is one of the ironies about the discussion, the whole point is showing how good people can still have problems with sexism and not realize it.09/17/2014 - 9:11pm
Andrew EisenYes, there have been a handful of op-eds suggesting that the term “gamer” has become tainted (two that I know of) but that’s the opinion of only a few. I've seen an equal number from those who disagree.09/17/2014 - 8:55pm
Andrew EisenExcept, you haven't provided a single example of a site that’s actually calling gamers a "collective of Sexist White Bigoted Basement Dwelling Manchildren."09/17/2014 - 8:55pm
TechnogeekIf you want to make the stereotype of gamers less painful, try calling people out when they do bad shit rather than handwave it away as "not all gamers". Even if it is a few bad apples, that'll still more than enough to spoil the barrel.09/17/2014 - 8:53pm
quiknkoldI'm not going to Sell Gamergate anymore. It can sell itself. But I will sell the integrity of the Gamer. That we are still good people, who create and donate to charitys, Who engage with those around us and just want to have a good time.09/17/2014 - 7:35pm
 

Be Heard - Contact Your Politician