BT Hub Manager

[jgroberts]

Hello,

Currently, anyone who is connected to my home WiFi can go to the BT Hub Manager and see the basic information (obviously they need a password to be able to change settings etc).

Is there anyway of disabling any access without putting a password in?

Thanks.

[licquorice · Accepted solution]

No

[jgroberts]

Shame, thanks for replying though.

[StuartHK]

None of the information visible by default is security sensitive.

What is a bigger issue, in my opinion, is that there is no way to log out after you have put the password in.  You have to wait for it to time out, leaving a window of vulnerability that really should not exist today, even in home grade equipment.

[licquorice]

The 'window of vulnerability' is

(a) Very short, the login times out after a few seconds of inactivity.

(b) The login is only valid on the device that logged in, not any other devices.

Hardly a major concern!!

[StuartHK]

a)  Usually,…I’ve known it to be a lot longer than a “few seconds” at times.

b)  A fair point.  I’ve never tried to access it from a second device, so I’ll take your work for it.