论坛徽章:: 13

电梯直达

1楼 [收藏(0)] [报告]

发表于 2014-03-01 12:03 |只看该作者 |倒序浏览

本帖最后由 ulovko 于 2014-03-01 13:07 编辑

一直不推荐小伙伴们买某个T开头的大品牌路由器，因为它所有的操作都是通过GET这种毫无安全性的方式。如果你的路由管理密码没有改，一句伪装成网页图片的CSRF(跨站请求伪造)代码，在你看网页的时候就可以修改路由器的配置，甚至让你掉线...我自己用Open-WRT路由，操作要token，相对安全

路由DNS劫持终于上头条了么。改密码是没用的：很多型号的路由器都存在系统漏洞，黑客在网页上放置了很多触发器，当你访问这些网页的时候，如果你家的路由器刚好存在这个漏洞，路由器上设置的DNS就会被修改成黑客指定的DNS，之后你的数据就会通过黑客的DNS，窃取信息弹广告就很随意了。

FROM: http://weibo.com/1691561783/AyPgqFETj

路由器, 安全性, 小伙伴, 图片, 密码

文库|博客

obsd178

家境小康

论坛徽章:: 0

2楼 [报告]

发表于 2014-03-01 12:31 |只看该作者

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution. pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices.