TTNET, Routers, Default Passwords and YOU! - UPDATE

Just when I thought that TTNET couldn't make things any worse, they managed to impress me. Looking in my mail server logs (again) I punched in a few of the ip's I got from them, and found something EVEN WORSE than my previous post.

Above is a login screen for an AirTies (Flash Req'd) RT-102 ADSL2+ modem. Being curious, I looked it up on our old friend the default router password list (see previous post). However, I only found a default password for the RT-201 model. Curious, I went to their site. Strangely, the RT-102 does not even appear on their support pages, so I looked up the next-highest model, the RT-103. I didn't find any documentation in english, but I did find a FAQ section, and to quote:

I forgot the password for my router, what should I do?

If you have forgotten the password you have defined for logging in to your router using the web interface, you need to reset your router to factory defaults. By going back to factory defaults, all other settings that you may have configured (DSL, Wireless, LAN settings) will also be erased. To reset your router, press and hold the “Reset” button on the back panel for 5 seconds while your router is on. You can then login to the web interface by leaving the password field blank, and reenter all your settings.

AHA! That must be it! I'm presuming there IS a default password at all! How silly of me! So, I leave the password blank, and viola! I'm in! *sigh* Now, at this point, I will admit I'm impressed with the routers capabilities. It supports 12 DSL modes, which is quite impressive.


Sigh. Not only do we see the same horrible mistake as last time, but I'm afraid it gets even more comical.


Perhaps, in turkey, there is no word for security? Perhaps there is no word for common sense? Perhaps I've missed something. Is it so much to ask for at least a minimum password policy, TTNET? Any ISP administrator that allows a password like that deserves to be flogged.

But let's look at the situation for a moment. This is a different router than before, with the same problem. The WAN configuration option turned on, and no password set. There is only one conclusion to draw from this: TTNET is doing this on purpose! Sure, the router company is nearly as much at fault, but it appears the TTNET employees are INTENTIONALLY turning on the WAN side configuration at setup!

I wish I had more to say about this, but I think the above speaks for itself.