Open Source Routers!

Netgear has announced the launch of its WGR614L open source Wireless-G router.

The fully-featured wireless router is designed to support a variety of applications created by the open source community.

The router supports Linux-based Tomato and DD-WRT firmware and will soon support OpenWRT.

It is powered by a 240MHz MIPS32 CPU with 16KB of instruction cache, 16KB of data cache and 1KB of pre-fetch cache, and incorporates 4MB of Flash memory and 16MB of Ram.

"There has been growing demand for more powerful platforms to support open source enthusiasts seeking to create more robust, commercial-grade applications for their wireless routers," said Som Pal Choudhury, senior product line manager for advanced wireless at Netgear.

The router features a single 10/100 internet Wan port, a four-port 10/100 Lan switch, an 802.11g access point and all of the most common security and logging features.

"An important feature of our offering is the dedicated and responsive open source community which enables users to easily exchange ideas and troubleshoot issues," explained Choudhury.

"New applications currently being developed include traffic shaping applications, redirections to captive portals for hotspots, guest access via a separate SSID, upstream and downstream QOS and intelligent bandwidth monitoring. "

Ironically the router is also 'Works with Windows Vista' certified. The WGR614L is available now for around $69.

New Home Router Hacking Program

A newly discovered Trojan in the wild hacks into home wireless routers and changes their DNS settings to point to the attacker’s rogue DNS server. The malware is a new variant of the DNSChanger Trojan that has been circulating around the Internet, according to researchers at Secure Computing who have been studying it.

Home routers make easy prey because many users don’t lock them down, and even use their default passwords for authentication. There’s been plenty of research in this space over the past year, everything from drive-by hacks to botnet infections to DNS rebinding. (See Attackers Use New 'Call-Home' Method to Infiltrate Home Networks and RSA Session Features Live Linksys Router Hack and The Hack Your Home Router Challenge.)

Sven Krasser, director of data mining research for Secure Computing, says the new DNSChanger Trojan attack also indirectly infects any machine that connects to the router. “This is the first time we’ve seen on [a] wide basis that the computing resources of the wireless router are part of the attack,” he says. “It also [affects] machines that are not directly exploited -- ones that are connecting to the router.”

The Trojan executes brute-force attacks on the Web interface of a router that only uses basic authentication -- and it’s mostly going after D-Link and Linksys routers so far, according to Krasser.

Secure Computing says the attackers behind the malware are the infamous Zlob malware authors.

Krasser says the attackers can send a victim to any Website, and most times return the correct site back to the user to evade detection. Other times they redirect a user to their own spoofed pages, he says. He says phishing is a likely goal of the attackers.

He says it’s possible that attackers could kick the attack up a notch and add put their malcode onto the routers, such as zombie code. Secure Computing researchers have posted some screen shots and an analysis of the Trojan in their blog.

Never use default passwords in home routers, Krasser says, and keep it updated.