Indeed, so many secret found, especially you found ME 517 which responsible to disable WebGUI,

Even I manage to add Huawei ME 350, 370 & 373 into D-Link ONR, anything anytime this AIO ONU can be take control and re-enable TR069 even user disable it, so many 'private' ME specific for ISP or Vendor:


For example, OLT can push ME 148 and forcing user using AIO ONU as Router, thus disallow Bridging...


it seem AIO ONU is bad idea, ISP can take control of it, even monitor the activity

This would be very dangerous

Indeed, I understand that TM giving AIO ONU just to cut cost, but ISP has total control of the device. Like ISP level DNS Poisoning. What if,... Government want filter and control, AIO ONU can do that, not so much control via Bridge ONU since routing at our own router.

I think bridge ONU is safest from prying eye

I believed TM is trying to cut cost, until they put a kill switch inside the firmware. What cost cutting measure requires a specially made kill switch? On top of that they actually field trial their kill switch.
I also believed they are incompetent to upgrade their network until they starts MITM attacking me and cheating their speedtest. None of these sounds incompetent.

I have found the following in their speghatti of iptables rule:


From my understanding all packet mark 0x400000 is allowed unrestricted accesss to your network.
I do not have the hardware to test but can anyone confirm if there is anything bind to port 8082? Why does this port receive special treatment?
Also all packet marked with 0x400000 will skip port forwarding right from your LAN (br0 is the LAN bridged virtual interface).

EDIT:
Found my answer. It is:
http://acs.tm.com.my:8082/tmacstr069

This post has been edited by kwss: Jul 27 2024, 05:44 PM

You are right! Brings back memory when competition is strong. When they are long enough in the business, they eventually go evil.

The Gov looks very eager to surveillance and censorship.
With recent DNS poisoning incidents, is it a coincidence?

Are we following the footsteps of Indonesia...

EDIT: Delete
reply wrong thread somehow

This post has been edited by PRSXFENG: Jul 27 2024, 06:57 PM

Just moved to a new house and there's the fiber wall socket by EVO.
As of now, I've been told that Unifi might be ready 'anytime' as it's even enlisted under the coverage checker (for my unit).

Is there any way I can DIY to see if the fiber connection is indeed activated or port opened? I already have a Unifi connection at my old house so what I did was to take the fiberhome modem with me, plug it into this new fiber connector from the socket at my new home but the red LOS light keeps blinking.

For one week, I got this issue when viewing TV2 and TV3 using Chrome from its UnifiTV Android/Android TV app and its web version (playtv.unifi.com.my)—no issue viewing those channels using its web version via Edge browser.

This post has been edited by eclectice: Jul 27 2024, 08:52 PM

Yes, not only ISP take control, but it is a way to tigh our hand from using better 3rd party router. Imagine what happen to sales of router in Malaysia if all Unifi and Maxis subscribers force to using AIO ONU/router.

Hahahaha, I think both also lazy to layan to many port in port out. Imagine if people switch ISP every few months like they switch mobile telcos. Somemore need to arrange technician to customers premise.

Cannot. TM have not activate the DP in your area I think. Also usually they need to do something like assign port for your house.

I was having the issue with the Web Version for all channels. iOS app no problem.

But yea, I fixed it by deleting all the PC Web TV instances in Settings - My Device in the iOS app.

Based on the advancement they made from purely port blocking to MITM, this must be a full time project.

We are following the footstep of a lot of middle east country like Syria and Iran. Given the support and admiration of the current government to those countries, it isn't far fetched to say they want to be in power for a very long time.
Mouth says want to fight penjajah. Reality is oppress own citizen to stay in power.

There is a documentary on them from 2016 called Black Code. I remembered the police chief mentioned they resort to mercenary spyware and the tried and true "rubber hose" interrogation method because they do not have tech like NSA. This is the exact thing Malaysia is going to do. Let's not forget the hacking of The Hacking Team which reveals Malaysia as a customer.
They are already sweeping everything they don't like under MCMC Act.

This is not just a theoretical attack.
UAE telco pushed software update that is actually spyware
Researcher: Middle East Blackberry Update Spies on Users
https://www.wired.com/2009/07/blackberry-spies/

Chinese government compromise your router to deliver malware to you. In the case of D-Link, TM already compromised it
Evasive Panda APT group delivers malware via updates for popular Chinese software
https://www.welivesecurity.com/2023/04/26/e...inese-software/

Given TR069 has unrestricted network access to your device and LAN, they can utilize it to spy on you
Hacking Millions of Modems (and Investigating Who Hacked My Modem)
https://samcurry.net/hacking-millions-of-modems

In the event TM is compromised, all their customer, including government customer will be in deep shit
Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers
https://www.cybereason.com/blog/research/op...tions-providers

This post has been edited by kwss: Jul 27 2024, 11:30 PM

This is not good,
If tm provide the way for that means any persistent tom,dick & harry also hv the same opportunity .

This is not good for consumer security with all the online services & banking activity.

No use to open ticket to mcmc , maybe some email to cyber security Malaysia under the purview of minister gobind can help to address our concern.

having frequent disconnect/reconnect issue for the past week. Port reset by TM didn't do anything. like every day will have sudden disconnect at random intervals, sometimes stable for hours or just few minutes. Router didn't overheat, didn't reboot itself, fibre cable looks fine but I asked TM to send their tech anyway tomorrow to just double check the fibre & maybe BTU.

im not very good at troubleshooting but looking at the logs below from my router, i would think it's on TM side that's the issue is. it's on the PPPoE session ('handshakes' i guess? is it the right word for it idk), like maybe this TM's device ibse04.wmu here just dropped the session, then unable to reach my router or not responding to my router's PPP initialization.
though I've no idea how to explain to the tech. Not exactly sure what device ibse04.wmu is, but from the logs i would hazard to guess it's the PPoE peer for my location. my networking skill is rusty.

2024-07-28 13:59:59 ppp[28755]: <6> 261060 ppp send LCP ACK
2024-07-28 13:59:59 ppp[28755]: <6> 261058 ppp receive LCP Request options(mru=1492;authtype=PPP_PAP;magic=0xda9550e8;)
2024-07-28 13:59:56 ppp[28755]: <6> 261064 ppp receive LCP ACK
2024-07-28 13:59:56 ppp[28755]: <6> 261061 ppp send LCP Request options(mru=1480;magic=0xa6bb0584;)
2024-07-28 13:59:56 ppp[28755]: <6> 261025 pppoe receive PADS sess-id(65446)
2024-07-28 13:59:56 ppp[28755]: <6> 261024 pppoe send PADR Host-Uniq(7053)
2024-07-28 13:59:56 ppp[28755]: <6> 261022 pppoe receive PADO form AC-MAC(00:00:5e:00:01:bb)
2024-07-28 13:59:56 ppp[28755]: <6> 261023 pppoe receive PADO AC-Name(ibse04.wmu)
2024-07-28 13:59:56 ppp[28755]: <6> 261021 pppoe send PADI Host-Uniq(7053)
2024-07-28 13:59:56 ppp[28755]: <6> 261026 pppoe send PADT due to(resending PADI)
2024-07-28 13:59:46 ppp[27362]: <6> 261021 pppoe send PADI Host-Uniq(6ae2)
2024-07-28 13:59:46 ppp[27362]: <6> 261026 pppoe send PADT due to(resending PADI)
2024-07-28 13:59:36 ppp[27362]: <6> 261021 pppoe send PADI Host-Uniq(6ae2)
2024-07-28 13:59:36 ppp[27362]: <6> 261026 pppoe send PADT due to(resending PADI)
2024-07-28 13:59:31 ppp[27362]: <6> 261021 pppoe send PADI Host-Uniq(6ae2)

This post has been edited by kerolzarmyfanboy: Jul 28 2024, 02:26 PM

Consumer security? That's a dream.

Anyone familiar in the industry even IT trained people can steal information from anyone with the right knowledge with these type of intentional loopholes they make.

There's nothing good about the internet today except for entertainment and the convenience of acquiring information.

To those wishful thoughts fools who think that they can use the internet to wage wars on others, you're merely using the weapons manufactured and supplied by your enemy.

From Tier-1 providers, largest web hosting companies, ISPs, top VPS/VPN providers and content providers rest assured all the big players with alphabets all are bought and funded by the deep state house that controls the creation of money in the world.

How safe are you on your enemy's turf and you have the bravery to demand for personal privacy?

https://forum.lowyat.net/index.php?showtopic=5471937

For small fries SME businesses, consumers, NEETs who still dreams about privacy is possible on the internet, are you silly to pay hundreds every month for your internet access? It's plain waste of money.

Try to reset PPPOE password with TM

will try that too. reading further on the logs, also saw these two lines;

2024-07-28 15:15:04 PPP INFO [21735] ppp send LCP TermReq due to Failed to authenticate ourselves to peer
2024-07-28 15:15:04 PPP WARNING [21735] ppp receive PAP AuthNak Access number is exceed

spent the last few hours on google & reading a bit into PPPoE nego & PPP nego process, lulz. There's a pretty good informative link here from Huawei,

Huawei

and if i'm reading my logs right, PPPoE negotiation between my router & TM side went through & session created, but seem to fail on the PPP for some reason. Not exactly sure what it meant by 'PAP AuthNak Access number is exceed' - like is it because too many retries, or there's an existing session out there with my Unifi PPPoE username. peculiar.

2024-07-28 15:15:05 PPP INFO [22432] ppp receive LCP ACK
2024-07-28 15:15:05 PPP INFO [22432] ppp send LCP Request options(mru=1480;magic=0x72f5ad01;)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADS sess-id(9466)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADR Host-Uniq(57a0)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADO form AC-MAC(00:00:5e:00:01:bb)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADO AC-Name(ibse04.wmu)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADI Host-Uniq(57a0)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADT due to(resending PADI)
2024-07-28 15:15:04 PPP INFO [21735] ppp send LCP TermReq due to Failed to authenticate ourselves to peer
2024-07-28 15:15:04 PPP WARNING [21735] ppp receive PAP AuthNak Access number is exceed

You are sending a PADI when the process reached PADO which is definitely wrong. What you put in Host-Uniq?

Maybe you should describe your setup because this looks like very non-standard. I am surprised it works previously. Are you trying to run more than one PPP client?

no no it starts from PADI. the logs sequence starts from bottom to top per the timestamp on the left. i guess the way i copy paste it is confusing to read.

2024-07-28 15:15:05 PPP INFO [22432] ppp receive LCP ACK
2024-07-28 15:15:05 PPP INFO [22432] ppp send LCP Request options(mru=1480;magic=0x72f5ad01;)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADS sess-id(9466)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADR Host-Uniq(57a0)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADO form AC-MAC(00:00:5e:00:01:bb)
2024-07-28 15:15:05 PPP INFO [22432] pppoe receive PADO AC-Name(ibse04.wmu)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADI Host-Uniq(57a0)
2024-07-28 15:15:05 PPP INFO [22432] pppoe send PADT due to(resending PADI)
2024-07-28 15:15:04 PPP INFO [21735] ppp send LCP TermReq due to Failed to authenticate ourselves to peer
2024-07-28 15:15:04 PPP WARNING [21735] ppp receive PAP AuthNak Access number is exceed

so there were a few earlier attempts that were unsuccessful, hence there's that access number exceed & failed to authenticate errors and then i believe that made the router dropped that session & try build another new PPoE session with TM by sending another PADI, redo the negotiation again.

really standard home internet setup, not running more than one PPP client.
my internet works now, but yea it's not stable this past week. fairly confident it's going to disconnect again in a few hours or minutes even. already on my fourth disconnect just for today. the logs were from my third one.