<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SoyaCincau &#187; P1 DV 230 WiMAX Modem</title>
	<atom:link href="http://www.soyacincau.com/tag/p1-dv-230-wimax-modem/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.soyacincau.com</link>
	<description>Alternative Views of the Local Mobile Scene and Then Everything Else - Maybe</description>
	<lastBuildDate>Thu, 09 Sep 2010 15:39:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Security Flaw on P1 DV 230 WiMAX Modem allows WiFi Stealing</title>
		<link>http://www.soyacincau.com/2010/03/11/p1-dv-230-wimax-modem-security-flaw-allows-wifi-stealing/</link>
		<comments>http://www.soyacincau.com/2010/03/11/p1-dv-230-wimax-modem-security-flaw-allows-wifi-stealing/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 10:39:13 +0000</pubDate>
		<dc:creator>soyacincau</dc:creator>
				<category><![CDATA[Packet 1]]></category>
		<category><![CDATA[Players in the Field]]></category>
		<category><![CDATA[Default P1 WiFi Password]]></category>
		<category><![CDATA[P1 DV 230 WiFi Modem]]></category>
		<category><![CDATA[P1 DV 230 WiMAX Modem]]></category>
		<category><![CDATA[P1 Security]]></category>
		<category><![CDATA[P1 WiMAX Modem WiFi Password]]></category>
		<category><![CDATA[Stealing P1 WiFi]]></category>

		<guid isPermaLink="false">http://www.soyacincau.com/?p=1035</guid>
		<description><![CDATA[P1&#8242;s DV 230 WiMAX Modem is one of the first WiMAX with WiFi modem that&#8217;s easy to use thanks to its simple plug and play approach. The only technical bit for the user is to enter the predefined WEP password which is uniquely customised for each USB WiFi Module. It looks all good and dandy [...]]]></description>
			<content:encoded><![CDATA[<p><img class="aligncenter" src="http://www.soyacincau.com/wp-content/uploads/2009/05/p1wimax_dv230.jpg" alt="" width="490" height="319" /><br />
P1&#8242;s <a href="http://www.soyacincau.com/2009/05/13/p1w1max-dv-230-wimax-modem-with-wifi-and-voip/">DV 230 WiMAX </a>Modem is one of the first WiMAX with WiFi modem that&#8217;s easy to use thanks to its simple plug and play approach. The only technical bit for the user is to enter the predefined WEP password which is uniquely customised for each USB WiFi Module.</p>
<p>It looks all good and dandy but there&#8217;s just one small problem. We found out that the<strong> &#8220;unique&#8221; WEP password isn&#8217;t that unique</strong> after all.</p>
<p><span id="more-1035"></span></p>
<p>If you&#8217;ve seen or used one of these, you will notice that they will give a randomised Wireless Access Point name or SSID such as <strong>07D24A</strong> and followed by a long WEP password such as <strong>7D24A1FFB0</strong>. Sure, you think that this is all safe but recently it was brought to our attention that there&#8217;s a simple flaw with the way they created these <strong>unique</strong> WEP passwords.</p>
<p><strong>How to access <span style="text-decoration: line-through;">your neighbour&#8217;s</span> default unconfigured P1 DV 230 Modem</strong>?</p>
<p>After reading up some postings online and comparison with our own, we&#8217;ve discovered a similar pattern in all P1 DV 230 modems. Here&#8217;s how you get the WEP Password from the SSID:</p>
<ol>
<li>Get the SSID. e.g. <span style="color: #ff0000;"><strong>02B92C</strong></span></li>
<li><strong>Remove </strong>the first character. (<strong><span style="color: #ff0000;">0</span>2B92C </strong>-&gt; <strong>2B92C</strong>)</li>
<li>Add <strong>1FFB0</strong> (Zero not the letter O) (WEP Password: <span style="color: #ff0000;"><strong>2B92C1FFB0</strong></span>)</li>
</ol>
<p>Easy, isn&#8217;t it? By default, most P1 customers would just switch on the modem and surf away without any need of changing the password. Therefore, it is highly likely that anyone can scan their WiFi and search for a SSID that contains 6 random numbers which is most probably a P1 WiFi modem. With the technique above, anyone can access a default P1 DV 230 modem without much restriction.</p>
<p>We&#8217;re surprised that P1 <strong>didn&#8217;t actually randomised the WEP Passwords</strong> and to add more insult to the injury, P1 also didn&#8217;t also put much effort in <strong>educating </strong>its customers on the need of <strong>changing their WEP password </strong>for security reasons.</p>
<p><strong>Disclaimer: </strong><span style="color: #ff0000;">We do not condone unauthorised use and stealing of other people&#8217;s WiFi connection. We&#8217;re not responsible if you&#8217;re caught stealing WiFi connection and you may be subject to legal action if found guilty of doing so.</span></p>
<p><strong>How do you protect your P1 DV 230 Modem?</strong></p>
<p>If you&#8217;re a P1 DV 230 Modem user, you can change your WiFi WEP Password to prevent your neighbours from potentially sucking up your limited monthly bandwidth with the steps below.</p>
<ol>
<li>From your browser which could be either <strong>Internet Explorer</strong> or <strong>Firefox,</strong> enter <strong>http://10.1.1.254</strong></li>
<li>Enter the following:<br />
Username: <strong>admin<br />
</strong>Password: <strong>admin123</strong></li>
<li>Click on <strong>Networking</strong> at the top right</li>
<li>On the left, click on <strong>WiFi</strong></li>
<li>Click on <strong>NEXT</strong> at the bottom to see your WiFi security settings.</li>
<li>Select <strong>Manual </strong>Define and you will be able to make changes to your SSID and WEP Password.</li>
<li><strong>Apply</strong> and <strong>reboot your modem</strong> by clicking on the power icon on the top right.</li>
<li>Your laptop/computer will be disconnected and you may need to search for the P1 DV 230 modem with the new settings.</li>
</ol>
<p>If you feel your P1 connection is faster or use less bandwidth after changing your password, it looks like you&#8217;ve been suckered by someone close by.</p>
<p>We hope that P1 will notify its customers on this and hopefully they won&#8217;t repeat such security flaw in their future products.</p>
<p><strong>DV 230 Manual</strong> <a href="http://www.p1.com.my/images/mainpage/PDF/WiMAX/DV230_WEB_based_config_150909_v1_3.pdf"><strong>Download</strong></a></p>
<p><strong>[ <a href="http://azmanishak.com/2009/12/p1-wimax-apa-yang-perlu-kamu-tahu/comment-page-1/#comment-13453">SOURCE</a> ]</strong></p>
<div id="facebook_like"><iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.soyacincau.com%2F2010%2F03%2F11%2Fp1-dv-230-wimax-modem-security-flaw-allows-wifi-stealing%2F&amp;layout=standard&amp;show-faces=true&amp;width=450&amp;action=like&amp;font=arial&amp;colorscheme=light" scrolling="no" frameborder="0" allowTransparency="true" style="border:none; overflow:hidden; width:450px; height:auto;"></iframe></div>]]></content:encoded>
			<wfw:commentRss>http://www.soyacincau.com/2010/03/11/p1-dv-230-wimax-modem-security-flaw-allows-wifi-stealing/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
	</channel>
</rss>
