Thomson Speedtouch USB ADSL modem driver stores user passwords in the clear.

Problem: A Win32 PC, connected to the internet via a USB Thomson Speedtouch modem requires converting to an external modem/router. User can not immediately find the ADSL password.

Solution: The ADSL user name is visible from the desktop “connect me up” software. The password can be found in the registry (search for Thomson, or Speedtouch), stored in plaintext!

I did notice there was an extra, non-printing character, at the end of the password. Perhaps it is a single byte checksum. Copy and paste all-bar-the-last characters to the password field on the modem’s configuration page, and you’re good to go!

Not all hacks are this easy. 🙂

Advertisements

Tags: ,

3 Responses to “Thomson Speedtouch USB ADSL modem driver stores user passwords in the clear.”

  1. Husana Streamyx Says:

    You are a very bright person!

  2. lap mang fpt Says:

    Tôi đã đọc rất nhiều bài viết liên quan tuy nhiên bài viết này
    là thực sự khó tính bài , giữ cho nó lên.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: