This topic

BT Hub Manager

jgroberts — Sun, 20 Aug 2023 18:34:22 GMT

Hello,

Currently, anyone who is connected to my home WiFi can go to the BT Hub Manager and see the basic information (obviously they need a password to be able to change settings etc).

Is there anyway of disabling any access without putting a password in?

Thanks.

Re: BT Hub Manager

licquorice — Sun, 20 Aug 2023 18:46:14 GMT

Re: BT Hub Manager

jgroberts — Sun, 20 Aug 2023 20:02:59 GMT

Shame, thanks for replying though.

Re: BT Hub Manager

StuartHK — Sun, 20 Aug 2023 21:16:41 GMT

None of the information visible by default is security sensitive.

What is a bigger issue, in my opinion, is that there is no way to log out after you have put the password in. You have to wait for it to time out, leaving a window of vulnerability that really should not exist today, even in home grade equipment.

Re: BT Hub Manager

licquorice — Mon, 21 Aug 2023 09:50:05 GMT

The 'window of vulnerability' is

(a) Very short, the login times out after a few seconds of inactivity.

(b) The login is only valid on the device that logged in, not any other devices.

Hardly a major concern!!

Re: BT Hub Manager

StuartHK — Mon, 21 Aug 2023 10:12:11 GMT

a) Usually,…I’ve known it to be a lot longer than a “few seconds” at times.

b) A fair point. I’ve never tried to access it from a second device, so I’ll take your work for it.