French ISP Offers to Block File-Sharing, Exposes Users to Attack

June 15, 2010 -

In response to the implementation of France’s “Hadopi” or three-strikes law, which targets illegal file sharers, a French ISP began offering its customers a service that would block file-sharing on their connections, but the software came with its own problems.

Orange was the ISP offering the service, for the small price of two Euros per month, and it was intended to allow users to “control the activity of computers connected to your internet line” by blocking access to an unknown series of blacklisted sites and addresses.

Unfortunately though, according to Torrent Freak, the Windows-only software, as detailed by a techie named Bluetouff, communicated with a public server that still had the default username and password of admin/admin. Oops.

Torrent Freak that it was:

... informed that people have accessed the server and have discovered that it’s possible to send malware to anyone using the software which makes a bit of a joke out of Orange when it claims: “The software runs in the background to ensure your safety without disrupting the important tasks that you perform”

Also, in an additional twist, the former French Minister of Culture, Christine Albanel, is now employed at orange as Executive of Communication.


Comments

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

How do people pull off stupid stuff like this? When I load Windows server applications I dont even use the local service account as the service account, I make a unique user for the services just so this kind of stupidity can not leveraged by a malicious user.

Sorry but this is security 101 stuff. The person who loaded this software needs to be terminated.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

 I am not following how this would make a differnce in this case.  It sounds like the sever application itself had the default username and password, so creating a unique user on the server would have no impact on the hole.

On the client side, I doubt most users are going to build a jail for a service that their ISP probably tells them to install via 'double click setup and never worry again'.

Re: French ISP Offers to Block File-Sharing, Exposes Users ...

he said that he creates a customized account and uses that as the administrator in place of the default account, essentially replacing it.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
Infophile@Matt: Apparently Dan Aykroyd actually is involved. We don't know how yet, though, but he's apparently going to be in the movie in some way.08/02/2015 - 4:17am
MattsworknameI still hold that not having the origonal cast invovled in any way hurts this movie, and unless the 4 actresses in the lead roles can some how measure up to the comic timing of the origonal cast, i just don't see it being a success08/02/2015 - 12:46am
MattsworknameMecha: regardless of what you think of it, GB 2 was a finanical success and for it time did well with audiances ,even if it wasnt as popular as the first08/02/2015 - 12:45am
MechaTama31I think they're better off trying to do something different, than trying to be exactly the same and having every little difference held up as a shortcoming. Uncanny valley.08/01/2015 - 11:57pm
MechaTama31Having the original cast didn't do much for... that pink-slimed atrocity which we must never speak of.08/01/2015 - 11:56pm
MattsworknameAndrew: If the new ghostbusters bombs, I cant help but feel it'll be cause it removed the origonal cast and changed the formula to much08/01/2015 - 8:31pm
Andrew EisenNot the best look but that appears to be a PKE meter hanging from McCarthy's belt.08/01/2015 - 7:34pm
Matthew Wilsonwhy, let me guess it runes like crap?08/01/2015 - 7:29pm
Andrew EisenInteresting. These throwers are different than the ones we saw in the earlier Ghostbusters prop pics. https://twitter.com/feigfans/status/62754147689817702508/01/2015 - 7:28pm
PHX Corphttp://www.neogaf.com/forum/showthread.php?t=1088640 NeoGAF: Warning: Don't buy Binding of Isaac Rebirth on 3DS08/01/2015 - 7:26pm
MattsworknameYou know what game is a lot of fun? rocket league. It' s a soccer game thats actually fun to play cause your A Freaking CAR!08/01/2015 - 7:02pm
MattsworknameNomad colossus did a little video about it, showing the world and what can be explored in it's current form. It's worth a look, and he uses text for commentary as not to break the immerison08/01/2015 - 5:49pm
MattsworknameI feel some more mobility would have made it more interesting and I feel that a larger more diverse landscape with better graphiscs would help, but as a concept, it interests me08/01/2015 - 5:48pm
Andrew EisenHuh. I guess I'll have to check out a Let's Play to get a sense of the game.08/01/2015 - 5:47pm
MattsworknameIt did, I found the idea of exploring a world at it's end, exploring the abandoned city of a disappeared alien race and the planets various knooks and crannies intriqued me.08/01/2015 - 5:46pm
Andrew EisenDid it appeal to you? If so, what did you find appealing?08/01/2015 - 5:43pm
MattsworknameIts an interesting concept, but it's not gonna appeal to everyone thats for sure,08/01/2015 - 5:40pm
Andrew EisenThat sounds horrifically boring. Doesn't sound like an interesting use of its time dilation premise either. 08/01/2015 - 5:36pm
Mattsworknamean observer , seeing this sorta frozen world and being able to explore without any restriction other then time. no enimes, no threats, just the chance to explore08/01/2015 - 5:34pm
MattsworknameAndrew: I meant lifeless planet, Time frame is an exploration game. Your dropped onto a world which is gonna be hit by a metor in 10 seconds, but due to time dilation ,you actually have ten minutes, so you can explore the world, in it's last moments, as08/01/2015 - 5:32pm
 

Be Heard - Contact Your Politician