<story><title>FTC sues D-Link over router and camera security flaws</title><url>https://www.consumer.ftc.gov/blog/ftc-sues-d-link-over-router-and-camera-security-flaws</url></story><parent_chain></parent_chain><comment><author>nodja</author><text>My boss installed 2 camera DVRs a year or so ago. All I did was provide 2 external IPs for the DVR and didn&amp;#x27;t worry much about it. The password was the default &amp;quot;123456&amp;quot; that comes with these things, but since we don&amp;#x27;t care much about who sees the footage. At worse people will change the password and we need to factory reset (never happened).&lt;p&gt;Last week the internet for the whole office was going down. Weirdly I could remote in, but the DNS was not working. I first thought our DNS server crapped out but it was working fine. After some investigation, the firewall was not responding. After rebooting the firewall, it would work fine for a while, but go down shortly after.&lt;p&gt;Long story short: the DVRs my boss got (unbranded) come with telnet access on some nonstandard port. A botnet got access to it and was making thousands of dns and telnet queries, overloading the firewall.</text></comment>
<story><title>FTC sues D-Link over router and camera security flaws</title><url>https://www.consumer.ftc.gov/blog/ftc-sues-d-link-over-router-and-camera-security-flaws</url></story><parent_chain></parent_chain><comment><author>luma</author><text>How long is the company that provides the product on the hook for for post-sale support and security updates?  If I sell an internet-connected device which has a flaw discovered 5 years after the sale, am I still liable for patching that?  Nowhere in this article nor in the complaint do I find any guidelines as to what they consider to be reasonable after-sale support.  They list similar action taken against Asus and TRENDnet, which are all large international companies.  I&amp;#x27;m a dude in my workshop and placing an after-sale support and warranty requirement on anything I make for a period of n-years is onerous.</text></comment>