<story><title>No U PNP</title><url>https://computer.rip/2021-11-26-no-u-pnp.html</url></story><parent_chain><item><author>cyounkins</author><text>&amp;gt; I am actually somewhat skeptical of the security advantages of disabling UPnP for this purpose. The concern is usually that malware on a machine in the local network will use UPnP to map inbound ports...&lt;p&gt;For me the concern is not malware but crappy&amp;#x2F;insecure software proudly exposing itself on the internet.&lt;p&gt;Many IP cameras will use UPnP to make their web interface publicly accessible. Because of the long history of opening router ports, seeing a random open port on my public IP was quite surprising. If you haven&amp;#x27;t recently, check your own public IP in Shodan.io .&lt;p&gt;The cameras I&amp;#x27;ve used run crappy web interfaces that almost certainly do not get security updates. If an attack was successful on the camera, from there the attacker would have access to my internal network.</text></item></parent_chain><comment><author>beermonster</author><text>They go on to say “ The point is that I would agree that it&amp;#x27;s a good idea to disable UPnP, but not because of what UPnP does, and not just on your router. Instead, it&amp;#x27;s a good idea to be very skeptical of UPnP because of defective implementations in many embedded devices, especially routers, but also all of your IoT nonsense.”</text></comment>
<story><title>No U PNP</title><url>https://computer.rip/2021-11-26-no-u-pnp.html</url></story><parent_chain><item><author>cyounkins</author><text>&amp;gt; I am actually somewhat skeptical of the security advantages of disabling UPnP for this purpose. The concern is usually that malware on a machine in the local network will use UPnP to map inbound ports...&lt;p&gt;For me the concern is not malware but crappy&amp;#x2F;insecure software proudly exposing itself on the internet.&lt;p&gt;Many IP cameras will use UPnP to make their web interface publicly accessible. Because of the long history of opening router ports, seeing a random open port on my public IP was quite surprising. If you haven&amp;#x27;t recently, check your own public IP in Shodan.io .&lt;p&gt;The cameras I&amp;#x27;ve used run crappy web interfaces that almost certainly do not get security updates. If an attack was successful on the camera, from there the attacker would have access to my internal network.</text></item></parent_chain><comment><author>genewitch</author><text>jokes on them, i have CGNAT!</text></comment>