French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
SleakerWest End Games - Areal developers just got their Kickstarter suspended. Might want to dump that 'fully funded' status.07/22/2014 - 12:08pm
MaskedPixelanteHas anyone who bought it gotten their Sims 2 Ultimate Edition upgrade yet? Still waiting on mine, especially since they're supposed to be out by today.07/22/2014 - 10:45am
IanCDynasty Warriors 8 for the PS4 finally has the option to turn off the OTT depth of field that made the game look like a blurry mess. Only a few months behind the JP version patch...07/22/2014 - 10:17am
NeenekoI see nothing in Section 111 that would exclude IP transmission. It even explicitly includes 'other transmission methods'07/22/2014 - 9:28am
ZippyDSMleehttp://www.afterdawn.com/news/article.cfm/2014/07/19/ruling_aereo_is_not_a_cable_company07/22/2014 - 8:13am
ZippyDSMleelul what?07/22/2014 - 7:53am
ZippyDSMleehttp://arstechnica.com/gaming/2014/07/bungie-cross-generation-destiny-wouldnt-be-fair-to-low-res-players/07/22/2014 - 7:53am
MaskedPixelantehttp://www.joystiq.com/2014/07/22/wii-u-update-adds-system-to-system-transfers/ The latest Wii U update allows you to do the system transfer between two Wii Us. Still not true accounts, but getting there.07/22/2014 - 7:39am
Papa MidnightSpeculation from PC Gamer. Don't hold your breath. http://www.pcgamer.com/2014/07/21/microsoft-job-listing-says-nice-things-about-pc-gaming-isnt-clear-if-it-means-them/07/21/2014 - 5:58pm
MaskedPixelanteI dunno, it's probably Vevo powertripping.07/21/2014 - 5:52pm
Andrew EisenMP - Makes you wonder what the intention behind the removal was. Stop the RickRolls? Yeah, like removing that one video is going to make a difference.07/21/2014 - 3:27pm
MaskedPixelantehttp://www.billboard.com/articles/business/digital-and-mobile/6165313/youtube-blocks-original-rickroll-video Moment of silence, the original Rickroll video has been blocked in many regions.07/20/2014 - 3:53pm
PHX CorpUseless DLC news: Killzone Fart Pack http://ps4daily.com/2014/07/killzone-fart-dlc/07/20/2014 - 12:56pm
MaskedPixelantehttps://www.youtube.com/watch?v=uU1mK2ig_GU They did their research beforehand.07/19/2014 - 4:41pm
Sleaker@james_fudge - are you sure the FCC can pick and choose? the general rules I read as passed in the act don't really indicate that, but I didn't read through the entirety.07/19/2014 - 4:19pm
MaskedPixelanteOf course, Saban's entire point hinges on them not knowing what the tokusatsu genre is.07/19/2014 - 1:57pm
lomdrLink to where you saw this, Sora-chan?07/19/2014 - 1:50pm
MaskedPixelanteThis is just... confusing to me... They're not being sued, but it looks like extortion, but maybe now the devs can make demands of Saban? I dunno...07/19/2014 - 1:47pm
MaskedPixelantehttp://www.joystiq.com/2014/07/18/chroma-squad-dev-agrees-to-royalty-split-ultimatum-from-power-ra/07/19/2014 - 1:43pm
Sora-ChanSo apparently, Towns is updating again. Not sure what that means, since last we heard it got abandoned.07/19/2014 - 5:42am
 

Be Heard - Contact Your Politician