main
Report a problem

D-Link DIR-655 Firmware 1.21 Hijacks your Internets

Ender2070   on 08 November 2008 - 11:14 · 16 comments & 8570 views

Advertisement (Why?)
Normally when you think of firmware updates for a router you would expect security updates and bug fixes. Would you ever expect the company that makes the product to try and sell you a subscription for security software using its firmware as a salesperson? I recently ran into this myself when trying to troubleshoot my router. I noticed when trying to go to Google that my router was hijacking DNS and sent me to a website trying to sell me a software subscription. After upgrading your D-link DIR-655 router to the latest firmware you'll see that D-link does this, and calls the hijacking a 'feature.'

News source: Slashdot via Ubersource (Blog)

Post a comment · Send to friend Comments · There are 16 additional comments
#1 Grandaevus on 08 Nov 2008 - 13:43
Sounds like I'm sticking to the version 1.11 I have... works fine for me.
#2 +DARKFiB3R on 08 Nov 2008 - 14:03
LOL that sucks. Can you easily change this behaviour? Are there custom firmwares for that model?

If I owned a D-link affected by this, I'd be contacting them, and giving them hell.
#3 Airlink on 08 Nov 2008 - 14:24
Note to self: Do not buy any D-Link products.
:<
#4 Saarineames on 08 Nov 2008 - 16:02
The router itself it great. The firmware, well...

I bought a DIR-655 about two weeks ago, and upgraded the firmware immediately. I couldn't believe my eyes when I was greeted with this ploy to sell me SecureSpot 2.0 services. There is an option in the menu to enable/disable the service -- and that's no excuse for accepting this behavior, but it's there if anyone was curious.

Better off getting the latest firmware upgrade without the "SecureSpot 2.0" services here.
(2 replies) #5 daz411 on 08 Nov 2008 - 16:50
Agreed, this router is one of the best I've ever owned, especially the QOS! Works flawlessly

Just turn off the SercureSpot feature in the router and you'll never have another problem.
#5.1 Ender2070 on 08 Nov 2008 - 23:27
With your logic let's go. Here's a few nice examples:

1) I decide to punch you in the face repeatedly and the police say it's not illegal unless you opt-out.

2) You take your car to the mechanic to get fixed. You put your keys in the ignition and instead of turning the car on your radio turns on and starts trying to sell you other services the mechanic offers.
#5.2 daz411 on 09 Nov 2008 - 03:12
Ender2070 said,
With your logic let's go. Here's a few nice examples:

1) I decide to punch you in the face repeatedly and the police say it's not illegal unless you opt-out.

2) You take your car to the mechanic to get fixed. You put your keys in the ignition and instead of turning the car on your radio turns on and starts trying to sell you other services the mechanic offers.


It's my logic because I don't really care and I have more important things to worry about then my web browser being re-directed 1 time in my life to a page that I can opt out of. It's really not that big of deal, and you really can't compare it to the examples you gave.
(2 replies) #6 chaicka on 08 Nov 2008 - 16:59
I have been running DIR-655 with firmware version 1.21 (without SecureSpot edition) and have not encounter this hijack of DNS issue.

The firmware version 1.21 comes in 2 flavors - one with SecureSpot, one without SecureSpot.
http://support.dlink.com/products/view.asp?productid=DIR-655
#6.1 Ender2070 on 08 Nov 2008 - 23:21
It's already well established and we know theres firmware without securespot. Heres the problem. Most people don't know what it even is and wouldn't expect there to be a seperate firmware download that ISN'T annoying. The router setup page has an automatic update feature to the latest version - which install's the SecureSpot infested firmware.
#6.2 chaicka on 09 Nov 2008 - 16:29
Ender2070 said,
It's already well established and we know theres firmware without securespot. Heres the problem. Most people don't know what it even is and wouldn't expect there to be a seperate firmware download that ISN'T annoying. The router setup page has an automatic update feature to the latest version - which install's the SecureSpot infested firmware.


I don't think the automatic update feature actually update to the version 1.21 with SecureSpot firmware. At least it didn't for me.
#7 EddieZ on 08 Nov 2008 - 23:48
This is called Bsecure. You can download an firmware version with and a version without it, and even then you can still turn it off. The service is not a piece of crap, there are plenty of PC owners who would benefit from this (given the number of zombie/hijacked PC's).
Get angry over your mailbox spam, this is a minor nuissance compared to that.
#8 MMaster23 on 09 Nov 2008 - 00:24
Neowin .. you're doing it wrong. It's News source: Ubersource (Blog) via Slashdot

Not News source: Slashdot via Ubersource (Blog)

(2 replies) #9 Bosaka on 09 Nov 2008 - 04:14
Considering how robust the DIR-655's firmware is D-Link isnt nearly as big as linksys, its not like it's DRM and really most people who don't know crap about routers aren't likely to buy this router.
#9.1 EddieZ on 09 Nov 2008 - 12:29
Speed is much better on the Dlink though ;-)
#9.2 chaicka on 09 Nov 2008 - 16:33
Well, there are quite alot of DIR-655 users who know nuts about routers getting it in where I am from. It's all thanks to forums and word of mouth that brought the fame of DIR-655.
#10 +olavinto on 10 Nov 2008 - 15:59
As mentioned before it can be switched of from the routers admin control panel: type 192.168.0.1 to your browsers address bar, log in, select the Advanced tab and from the left side select Securespot. From there deselect the Enable securespot services box and click Save settings.

I'm using the euro version of DIR-655 with the US firmware v1.21 without any problems. It did offer me the Securespot service when I installed it but it doesn't have to be used. I got the USB-device support with it. It wasn't available for the euro version at that time.

In my opinion this it's not any different from software that come with Google Desktop etc. You just have to deselect it if you don't want to use it. It's annoying but it's the users decision. Many people just hit next, next and go on with it without checking what they are installing and then complain that it installed something without their knowledge...

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)