apple / apple/password-manager-resources

Dealing with broadband routers and consumer IoT devices that hijack the DNS

Open
#41 3 comments 0 reactions 0 assignees View on GitHub
general authentication discussion quirk suggestion
Dominant language
JavaScript
Stars
4.8k
Forks
649
Avg merge
9h 50m
Merged PRs (30d)
15

Description

Hi,

consumer broadband routers [[A](https://www.telekom.de/hilfe/festnetz-internet-tv/anschluss-verfuegbarkeit/anschlussvarianten/allgemein/konfigurationsseite-speedport-wird-nicht-angezeigt), [B](https://avm.de/service/fritzbox/fritzbox-7590/wissensdatenbank/publication/show/1_Benutzeroberflache-der-FRITZ-Box-aufrufen/), [C](https://www.vodafone.it/portal/Aziende/Partita-IVA/Supporto/ADSL-e-Rete-Fissa/Station-e-altri-dispositivi/Vodafone-Station-Revolution/Pannello-di-controllo-station-revolution)] and some IoT devices hijack the DNS for convenient web interface access.

![fritz](https://user-images.githubusercontent.com/883685/83917553-6a06d180-a777-11ea-8eb4-98d6f96398a8.png)

Examples include:
```
http://speedport.ip --> http://192.168.2.1

http://fritz.box --> http://192.168.178.1

http://vodafone.station --> http://192.168.1.1
```

Should we add such cases to the [quirks/websites-with-shared-credential-backends](https://github.com/apple/password-manager-resources/blob/master/quirks/websites-with-shared-credential-backends.json)?

Best,
Max

Contributor guide

Open the contributing guide

Research direction

Review quirks/websites-with-shared-credential-backends.json and the linked router examples first. Determine whether the listed hostnames belong in that resource, then ensure the resulting entries represent the Speedport, FRITZ!Box, and Vodafone Station cases described in the issue and that the JSON remains valid.

Written by the indexing model from the issue text.

Assessment

Tech stack
json
Domain
embedded-iot, networking, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.