Potential Serious Security Flaw with BT Smarthub 2

[licquorice]

I'm of the opinion it is when neighbours are on the same phase which is not the norm. Normally houses are fed red, yellow, blue etc along the street so that adjacent houses are not on the same phase so that a house on the same phase is far enough away for the signal to be attenuated sufficiently.

[WSH]

I've not had any involvement with powerline adapters for ten years but the manufactuters even back then used to claim they would go for 300m and, of course, you both share the same supply in the street.  Even if it's a different phase there may be cross over at the meter.

I also not familiar with the BT kit but as I said, you should be able to change the encryption key.  Never leave any device on the default keys, the bad guys can look up the default settings and try them.

Edit:  Just to clarify the phase issue.  I once worked for an industrial concern that had two different rooms on two different phases.  (We knew that because one room lost power one time and it turned out to be a problem with that phase).  We could still get the powerlines to talk to each other, however.

[jonkendall]

OK.  That's interesting about the phases.  I wrongly assumed they were limited to your ring or at least your meter.

So I am guessing (which I will confirm later) that my neighbour has a powerline network that he is using for Wifi too, hence why the powerline network knows the SSID and WiFi passcode and hence why, via my powerline adaptor (which is probably the same TP link model provided via BT) knows about his network.

Now I have turned off the powerline adaptor the WiFi performance has increased massively.  Which is good.

However I need the powerline adaptor for the TV, so need to work out how to limit that to only work with mine

[WSH]

The big increase in Wi-Fi performance is interesting.  If they are producing a lot of RF, they could be communicating direct through the wall.  (It was the sparky that suggested it was via the meter, so who knows?)  They're not Wi-Fi capable powerlines are they?

[jonkendall]

Not sure it is RF.  I think in effect what I has was 2 routes out using the same IP addresses and therefore there were alot of unseen errors and retries which made the performance look poor on occasions.

[jonkendall]

I suspect my neighbour's might be wifi enabled.  Now I just need to figure out the Poweline to make sure they won't link up with next door's.  

Looking at the TP Link manual it is not clear how I ensure that my 2 TP Links only talk to each other?

[iniltous]

Because the powerline adapter plugs into  an Ethernet port on the router , the router SSID and wireless password are irrelevant, if you connected a laptop via an Ethernet cable to the router there are no credentials to enter to be accepted onto the network , powerline is a wired device , the ‘WiFi’ credentials are only for wireless devices…..as stated this issue crops up occasionally somehow the adjacent property ‘mains’ wiring allows one neighbours powerline adapter to pair  to the powerline unit in the neighbouring property, effectively joining the ‘wrong’  if the neighbouring property also has powerline type adapters, far as a security flaw , this isn’t particular to the BT hub,  if it’s a design/security  flaw , rather than customer mis operation,  its  with the way powerline devices pair up .

[jonkendall]

Yes I agree, as you say there are no credentials because there don't need to be any. 

My question is there any way to avoid this.  Can I force my TP Links to pair with each other and nothing else.

[licquorice]

The credentials are between the master and slave adapters, not the router. The pairing should be encrypted.

[jonkendall]

Yes but currently my powerline network seems to be include my neighbours powerline devices hence where I got to this problem in the first place.

So not sure how I ensure that this doesn't happen in the future