It happened as predicted because TM does not give a rats ass about basic security. I mentioned a few pages back that all BTUs are vulnerable to being accessed using the VOIP network since TM just dumped a default user/pass in all of them.

I'm not too sure what they can achieve with your SIP login details as I don't use the technology much.. but causing a DoS on all 3 of your Unifi services is very easy just by accessing the BTU. They should not be able to use the BTU to break into your internal network as long as your router is secured properly.

I've just changed my Fiberhome admin login/pass and disabled its telnet daemon.. still figuring out how to write the changes to the startup config. I'd release a guide but many people will not be able to do it as it requires a Console cable. Do tell me if its possible to permanently secure the Huawei/Alcatel BTUs through the web UI though

Edit : The BTUs can only be accessed through the VOIP network AFAIK so if someone has changed your configuration (and it's not some glitch by TM), it's definitely being done by other Unifi users.

hey jacky, they are well aware of this problem and the team is coming up with something to patch the problem, dont worry

for the meantime, if u really feel unsafe, disable the remote management thing.

hmmm, just wonder is this the HSSB box? The wire is black and yellow in middle ... saw it at the pole opposite to my house.

---

Added on September 9, 2010, 10:44 pm[IMG height="5"]http://img641.imageshack.us/img641/3849/20100909222140.jpg[/IMG]
hmmm, just wonder is this the HSBB box? The wire is black and yellow in middle ... saw it at the pole opposite to my house.