RCE on Telia Routers
So this issue affects Telia Lithuania clients.
But I wouldn't be surprised if the same (or similar) issue affects clients in Sweden.<p>The article mentions a leaked password hash from 2014, but as far as I know, there were at least 3 password (not hash!) leaks over the last 10 years.<p>Generally, I recommend people buy their own routers and never use the "Self Service" for managing passwords.<p>As for hostility of service providers - the situation isn't that good.<p>Some years ago, a white hat reported some data leak vulnerabilities in a medical "self service" portal.<p>Vulnerability: change your personal code/id (SSN for folks in US) to another person's number in the POST, and voila - you get the medical history of another person.<p>What happened is that the white hat got blamed for "hacking" that system.<p>Result: Vulnerabilities aren't getting reported.
Bad guys are exploiting them left and right.
White hats don't bother disclosing them.<p>I personally know at least 5 exploitable vulnerabilities in some government websites, but I won't be disclosing them, since that will land me in a lot of trouble.<p>EDIT: grammar