Reply to post: Re: Home Router Traffic @Metrognome

Today the web was broken by countless hacked devices – your 60-second summary

Peter Gathercole Silver badge

Re: Home Router Traffic @Metrognome

UPnP.

Convenient, yes.

Secure, hell no.

One thing it allows is any internal device to knock inbound holes in your firewall, without your knowledge or approval.

I appreciate that without it, some consumers would have to learn something, but the downside is that all the IoT devices that sit inside home networks and use UPnP can potentially become a participants in a DDoS attack like this.

Do consumers worry about this? Well probably none of them understand what it is that caused the DYN DNS outage, and even less about whether their house was part of the cause.

But should we? Definitely yes, if we want to maintain a functional and usable Internet!

I run my firewall with UPnP disabled, so it works inside my network for device discovery, but the firewall can't be controlled, and there's not that much that either I or the other members of my family have noticed that doesn't work.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon