On: Hacking millions of modems and investigating who h...

[thecodemonkey]

It's easy to hate on big companies. But can we just applaud Cox for having patched this within a day? That's incredible.

[pera → thecodemonkey]

To be honest I would be very surprised if this was Cox as an organization and not just one or two very passionate workers who understood the severity of the issue and stayed after hours fixing it for free.

[choilive → thecodemonkey]

That was the most shocking part of the entire article! Unfortunate this vuln existed but clearly engineers there have enough teeth to get stuff done.

[flafla2 → thecodemonkey]

Agreed. Bugs happen, bug fixes don’t always happen (especially quickly)

That being said, we could all do with a bit more input sanitization, and I hope Cox learned their lesson here.

[nsbk → thecodemonkey]

Seems more like a configuration error. Load balancer balancing over a few hosts, one of them missconfigured. Most likely over 2 hosts given the 50/50 success ratio of the intruder test. If that’s the case then it’s easy to fix in such timeframe