On Sat, 2005-09-24 at 16:48 +0530, V.K.Bharadwaj wrote:
Food for thought:
From my test of swapping my home and office
routers with NIL change to username/password (i.e. used my home router as-is in the office), it appears to me that :
the MTNL exchange/infra is not verifying username submitted by router against the telecom network's caller-id mechanism.
Vulnerablity to misuse apart, I guess the upside is that we now probably have a "roaming" (tri)band(width)
From what I have seen of the MTNL, the DSL modem is not tied to a
specific tel. line. The PPPoE/PPPoA session login is based on userid/passwd, similar to a PSTN dial up scenario - it will work on any phone connection that is DSL enabled. When you used your home router @ work, your connection was logged against your "home" account programmed into your home router. Had you changed the password to some gibberish string, you would have got "authentication failed."