click for larger version
Well this is interesting. I was considering becoming a reseller for Suddenlink Cable since I’ve been very pleased with their internet service. However, if you “rent” the SMC8014WN Wireless Modem/Router/AP from them – BEWARE!
Suddenlink has locked down the firmware in the SMC8014WN so that most of the typical features from any $60 router/access point from BestBuy or OfficeDepot or NewEgg – are simply not available. That’s insane.
WEP as a security measure is so broken that your (and everyone else’s) kid sister can easily circumvent it,” said computer security researcher Ralf-Philipp Weinmann, co-author of the aircrack-ptw tool that can crack WEP in minutes.
This unit is running a locked down firmware that doesn’t allow you to use anything but WEP encryption. As I’ve mentioned before, never use WEP encryption. This encryption algorithm was broken more than 10 years ago. The only exception would be legacy hardware that you simply cannot replace. In that case, you should put your legacy device on it’s own subnet separate from everything else.
You should ALWAYS USE WPA (or WPA2) encryption with a sufficiently strong passphrase. WPA + AES is currently unbroken and susceptible only to brute-force dictionary attacks, which all encryption schemes are. In other words, you can only break it by slamming a zillion password combinations at it and hoping for sheer luck.
You also can’t change the SSID. While changing or hiding the SSID does not increase security, it can make things more convenient.
Here is the best part. I called Suddenlink tech support just to make sure my findings were correct. A decent and knowledgeable tech support guy got on the phone and confirmed my findings.
Suddenlink Support: Suddenlink ships those modems with WEP to support the xBox which is WEP only. We lockdown the systems to make it easier for us to support users.
click for larger version
So I asked him simply: “Just to be clear, Suddenlink has shipped locked down devices with a broken security algorithm just to support the old xBox?”
Suddenlink guy: “Yes, that is correct.”
Hmm – maybe they haven’t heard of the DLink DGL-3420 which allows you to run WPA on the old xBox? If one of the Principal Tech Specialists at Microsoft thinks WEP is trivially crackable, maybe Suddenlink should listen?
Hmm – maybe Suddenlink should rethink their corporate policy on their users’ security? Maybe they shouldn’t send installers out who are morons and know nothing about networks nor security?
By the way, Suddenlink rapes you for $10/month until the end of your service for this piece of junk.
Solution: Purchase a Motorola Surfboard Modem and a Linksys Wireless Router. Simple. Effective. Cheaper. Safer.
{ 7 comments… read them below or add one }
Well, the only reason the company decided to do it was because so many people were complaining about us not having a wireless modem option. Suddenlink is not in the business of doing networking which is the reason for use not having technicians that are very skilled in that area. People often call us wanting us to support thier router and just want to have something we can support.
It’s more of a “well, if you insist…” option than something that’s being pushed and made to cater to novice users. Another reason why the firmware is locked. It’s understood that most people will get their own router considering the cost of the unit vs having your own.
BTW I’m a Technical Support agent and I don’t officially speak on behalf of Suddenlink Communications.
Hi Jason – I appreciate your response. I know what tech support agents have to deal with. I was a support agent for Bellsouth DSL for over a year, and I currently have over 700 clients (residential and business). My response is not directed at you personally – at least you have answered.
It would be trivial for Suddenlink to to ship the wireless “modems” non locked-down and pre-configured for WPA with a disclaimer on supporting certain legacy wireless devices. If a support call comes in, you have the customer hit the hard reset button, and you are back to square one. How hard is that? It’s not.
Another small point – Suddenlink most certainly IS in the business of networks. Do we need to define the internet? Do I need to pull up Suddenlink ads promoting multiple devices?
When Suddenlink is promoting their device, most users won’t look for another option unless they use or know someone like me. Case in point – my neighbors. Once I explained the downside in security and features and did some simple math, they were ticked off. However, most people will think Suddenlink is providing them with up to date equipment and hey – $10/month sounds like a good deal. Again – I have literally hundreds of residential customers in my business. I know what most typical users think.
The configuration Suddenlink is using is BAD. Period.
Yea I am the Suddenlink employee. I thought is amusing when rex called in. He used almost the exact phrase I did when they told me we were using WEP in training. “You realize any 10yr old can crack WEP in about 10 mins”. LOL, and all to support a very old game system. I can understand why alot of that stuff is locked down though. You don’t need the average user accessing alot of those setting and causing more work for tech support. Kind of like how users in business environments have alor of functions locked out on their PCs (ie the ability to install unauthorized software, change security settings).
In regards to Jason’s comment “Suddenlink is not in the business of doing networking” he would be wrong. we do not officially support 3rd party routers, but we run CAT5 cable all the time and setup connections for networking. The commercial side does do networking on a regular basis. When I was doing computer consulting I had a real problem with Cox (now Suddenlink) doing networking in my clients homes on a regular basis and causing more troubles than they fixed. Even after it became Suddenlink I was not uncommon for me to get a call from an upset customer where Suddenlink installers made a huge mess of things.
The wifi is another revenue stream they are trying to cultivate to build business. What I find funny as well, is that Suddenlink is now taking actions to enforce DMCA and shutting down customer for 6 months for repeated violations and bootlegging. Yet their own security on their wifi is so broken that a customer could be easily hacked, and copyrighted material downloaded through no fault of the customer. Seems like a good way to get yourself sued. IF I were a bootlegger, I would subscribe to the service and bootleg only through a wireless connection and then when caught claim it was someone who cracked Suddenlink’s weak key. What is going to be sad, is when they start getting a lot of customers who’s wireless nics will not support WEP at all…and I have seen a few already. They will have to scramble to get all the standards changed and the techs (both phone and field) will have to scramble to accommodate existing customers with new PCs. More work created from not doing it right the first time.
I’ve bragged to more than one person that I had actually talked to someone who could hold a decent tech conversation with me. I’m glad you posted.
If you ever need any help, feel free to ask.
Well, I just switched to SuddenLink from Verizon and I am looking for a replacement modem. I understand the WEP and hope it won’t be an issue where I am located. Any suggestions as to an easy to install wide range unit to replace the wireless one I am renting for $10?
Go get the Motorola Surfboard from BestBuy for about $89 and also buy a good Wireless Access Point / Router. Personally I like the Linksys WRT54GL, which you have to order (can’t get it locally).
http://www.newegg.com/Product/Product.aspx?Item=N82E16833124190
For about $150 total, you will own what you need. That will pay for itself within the first 15 months, and you will be safer.
Forgot to mention about range….
I don’t care what the box says on your wireless access point, you will NOT get “300 feet” of coverage. Period. Even with N. Typical real-world ranges are about 75-150 feet. Remember, even if your access point will broadcast further, the hardware in your laptop typically won’t. There are also a lot of other factors such as interference, walls, etc, that affect wireless coverage.
Also, if your laptop or other wireless device only supports G, then you won’t get the additional range benefits that N does provide. You can go ahead and get an N wireless access point if you want, it just won’t really do you any good unless your existing hardware can support it.
On bandwidth, N won’t make your “internet” any faster. The fastest Suddenlink connection is 20Mbs. Wireless G runs at theoretical 56Mbs depending on signal strength, other devices, etc. Wireless N runs at maximum of 600Mbs – so it will help if you are copying files from one device to another (assuming both support N), but it WILL NOT make your internet connection any faster.
Hope that helps.