A group of attackers managed to compromise 300,000 home and small-office wireless routers, altering their settings to use rogue DNS servers, according to Internet security research organization Team Cymru.

In January, Team Cymrus researchers identified two TP-Link wireless routers whose settings were altered to send DNS (Domain Name System) requests to two particular IP addresses: 5.45.75.11 and 5.45.76.36. An analysis of the rogue DNS servers running at those IP addresses revealed a mass-scale compromise of consumer networking devices.

Over a one-week period, more than 300,000 unique IP addresses sent DNS requests to the two servers, the Team Cymru researchers said in a report released Monday. Many of those IP addresses corresponded to a range of routers, including models from D-Link, Micronet, Tenda, TP-Link and other manufacturers, that had their DNS settings maliciously altered, they said.

The researchers believe those devices were compromised using different techniques that exploit several known vulnerabilities. Many of the affected devices had their administrative interfaces accessible from the Internet, making them susceptible to brute-force password-guessing attacks or unauthorized access using default credentials, if their owners didnt change them, the researchers said.

A considerable number of devices also appeared to be vulnerable to a security flaw reported in January in ZynOS, a router firmware created by ZyXEL Communications thats also used on router models from other manufacturers. That vulnerability allows attackers to remotely download a file containing the configuration of vulnerable routers without authentication and parse it to extract the password for the routers administrative interface.

According to the Team Cymru researchers, its also likely that attackers used cross-site request forgery (CSRF) to exploit vulnerabilities in TP-Link routers that have been known since last year.

CSRF attacks involve placing malicious code on a website to force visitors browsers to send specially crafted requests to a third-party URL. If the users are authenticated on the third-party site and the site has no CSRF protection, the malicious requests can abuse the users access on that site to perform unauthorized actions. This type of attack is also known as session riding.

Attackers can use CSRF techniques to attack routers when their administration interfaces are only accessible from the local area network by proxying requests through their owners browsers and leveraging their authenticated sessions.

The Team Cymru researchers noted two vulnerabilities reported in various TP-Link router models last year that are known to have been targeted through CSRF attacks. One allows attackers to replace the administrator password with a blank one and the other allows changing the routers DNS settings, even if the rogue request contains bogus credentials.

The first vulnerability was tested successfully against a TP-Link TD-8840T router running firmware version 3.0.0 build 120531 that was one of the first victim devices identified in the attack campaign, the researchers said. The second vulnerability reportedly affects TP-Link WR1043ND, TL-MR3020 and TL-WDR3600 running various firmware versions, but other models might also be affected.

Continue reading here:
Attack campaign compromises 300,000 home routers, alters DNS settings

Authorities say a drunk driver hit a Knox County school bus head on Authorities say a drunk driver hit a Knox County school bus head on It was a traumatic ride home for some Knox County students Tuesday afternoon. Deputies say their bus was hit head on by a drunk driver around 4 p.m.More >> It was a traumatic ride home for some Knox County students Tuesday afternoon. Deputies say their bus was hit head on by a drunk driver around 4 p.m.More >> Rescuers locate three missing teens in Anderson County Rescuers locate three missing teens in Anderson County Rescuers have located three teens that went missing late Tuesday night on Windrock Mountain.More >> Rescuers have located three teens that went missing late Tuesday night on Windrock Mountain.More >> TBI searches homes nearly 3 years after Holly Bobo's disappearance TBI searches homes nearly 3 years after Holly Bobo's disappearance The Tennessee Bureau of Investigation executed search warrants in the disappearance of Holly Bobo on Friday, nearly three years after she went missing.More >> The Tennessee Bureau of Investigation executed search warrants in the disappearance of Holly Bobo on Friday, nearly three years after she went missing.More >> No injuries in Knox Co. school bus wreck No injuries in Knox Co. school bus wreck A Knox County school bus was involved in a crash Wednesday morning in North Knoxville.More >> A Knox County school bus was involved in a crash Wednesday morning in North Knoxville.More >> Sevierville Police Department warns residents of utility scam Sevierville Police Department warns residents of utility scam The Sevierville Police Department is warning residents and businesses about a utility scam.More >> The Sevierville Police Department is warning residents and businesses about a utility scam.More >> Charges pending against Oak Ridge student involved in disturbance Charges pending against Oak Ridge student involved in disturbance Charges are pending against a teenager after an incident at Oak Ridge High School on Monday.More >> Charges are pending against a teenager after an incident at Oak Ridge High School on Monday.More >> Slow warming trend begins Wednesday Slow warming trend begins Wednesday

TODAY: Partly Cloudy. High: 54

TONIGHT: Clouds Thicken. Low: 33

TODAY: Partly Cloudy. High: 54

TONIGHT: Clouds Thicken. Low: 33

By BO WILLIAMS 6 News Anchor/Reporter

KNOXVILLE (WATE) - A lot of viewers have asked Streetwise about a stretch of highly used state highway in North Knox County.

Visit link:
Maynardville Highway project in North Knox County to begin soon

If you are like most gardeners you have some green spots, weedy spots and bare spots in the home lawn. Now just as the spring growing season is about to begin is the best time to regreen the entire home lawn.

First decide what portion of the lawn can be saved. Then dig out or spot kill the weedy areas with Roundup, Finale or similar weed control products labeled for lawn renovation. After the weeds begin to brown rake out the dead portions and till these and barren areas several inches deep to prepare the planting site.

Quickly reestablish a new lawn using plugs or sod of St. Augustine and seed or sod of bahia grass. Keep new lawns moist and apply a first feeding in 3 to 4 weeks. Then follow these tips to keep the home turf attractive.

- Mow when the grass reaches the desired height.

- Water when spots of grass begin to curl the leaf blades and turn a pale green.

- Give new lawns a repeat feeding in early summer.

- Check weekly for insects and diseases that need control.

- Hand pull or spot kill weeds becoming established.

Spring is a great time to reestablish your lawn. Now is the time to feed most lawns too with a quality lawn fertilizer found at your garden centers. One lawn fertilizer is usually suitable for all lawn types. Just follow the information on the label to make the best application that regreens your lawn.

More here:
Put the Green Back In Your Lawn

Opinions and ideas swirled Tuesday at a Dixon Parks and Recreation Commission meeting called to discuss how to make the city's park system better.

More than a dozen residents turned out -- and shyness was not an issue.

Commissioners wanted to hear the good, the bad and the ugly in order to better frame the update of the Parks Master Plan, described as the guiding document for the future development of the city's parks and recreation programs.

The good -- in general, the parks-to-resident ratio provides ample, attractive green space, those at the meeting agreed.

"They've always been beautiful parks and we've always had a nice supply of them," said Bessie Miller.

Rob Salaber with the Dixon Rugby Football Club pointed out that the ample parks allowed Dixon to be one of the few Bay Area cities able to host tournaments which often bring more than 1,000 people to town.

"Our quality of life is improved because of it," he said.

The bad -- maintenance and restroom issues, speakers said.

Residents said weeds and other overgrowth are commonplace in some parks and need to be attended to. As well, restroom cleanliness and availability are problems.

"They're a mess," Miller emphasized.

Read more here:
Dixon sounds off on city parks

Feng Shui Overdrive Effect Pedal
Telecaster played on a clean Ceriatone OTS at moderate volume.

By: Chase Murphy

Visit link:
Feng Shui Overdrive Effect Pedal - Video

20140303 Feng Shui Family-424

By: MINSICIJU

Originally posted here:
20140303 Feng Shui Family-424 - Video

Feng Shui Cures for the Planet and Money Clearing Manual
http://www.fengshuiforus.com/books/gaia/FengShuiCuresforthePlanet.html A manual to help you re-connect with the healing frequencies of the planet and re-esta...

By: Moni Castaneda

Visit link:
Feng Shui Cures for the Planet and Money Clearing Manual - Video

Feng Shui Wealth with 7 Jade Ingots on Star of David Crystal Base
One of the best feng shui enhancers to enhance earth energy and activate wealth luck #8.

By: Feng Shui Earth

Read the rest here:
Feng Shui Wealth with 7 Jade Ingots on Star of David Crystal Base - Video

Wednesday, March 5, 2014, by Spencer Peterson

Drop $625K on this desert abode from 1980 and you'd be near-neighbors with its architect, Michael P. Johnson, in case any questions arise about how best to feng shui the place. In the listing photos, that task is gamely taken on by a set of chrome-colored chairs in the exposed-beam, kitchen-connected great room, adding to the semicircular home's somewhat UFO-like vibe. Johnson, who teaches at the Taliesin, the Frank Lloyd Wright School of Architecturewhich is most likely why the listing somewhat puzzlingly describes this home as "reminiscent of the Frank Lloyd Wright style"built a few other homes in the adjacent Arizona towns of Carefree and Cave Creek, just north of Scottsdale, as well as in LA and Colorado, and this one is from a relatively early stage in his career. Its defining feature, that metallic half-moon roof, extends around a circular central volume, and is supported by a wood frame and columns of exposed stone.

Last sold in 2003 for $490K, the 2,527-square-foot home has three bedrooms and two bathrooms, a library with a built-in bookcase, a "circular private loft area for arts/crafts," and a small but breakfast-bar-equipped kitchen, all described in the listing as "distinctive and historic" with "clean, minimalistic edges and exterior columns of natural rock." Check it out in the gallery above.

7915 E Primrose Path Avenue [Estately]

See the original post here:
On the Market: Fan-Shaped '80s Throwback in the Desert Asks $625K

Fences [Stardock] HD
Heute stelle ich euch ein Programm vor womit ihr eurer Desktop besser unter Kontrolle habt. Link fr die Version http://www.chip.de/downloads/Fences-Letzte-F...

By: TechTube

Read more:
Fences [Stardock] HD - Video