
New Member
•
3 Messages
Disable smart home manager
I need to secure my network and the smart home manager represents a significant attack vector to my network. Please tell me how I can disable and remove it. I have a BGW320-500 router. Also I'd like to change my DNS servers.
dave006
Scholar
•
3.7K Messages
2 months ago
I am not sure how you see the Smart Home Application interface is an attack vector if you don't use.
It only requires your AT&T Credentials for your Online account which I would think you would be keeping secure. The SHM App is optional for smartphones but again it needs your AT&T Online ID and password. Still both vectors of attack.
Simple just run another DNS server on your LAN network or you can add a third-party Router in IP Passthrought mode and let manage your local network. You can disable Wi-Fi radios on the BGW320-500. Your third-party router will allow you to manage your own Wi-Fi settings.
ETA: still spelling...
Dave
(edited)
0
0
internet_privacy_advocate
New Member
•
3 Messages
2 months ago
@dave006 Not sure if it was clear question was how to disable it.
SHM is not only accessible to my local network it's connected to the global internet and thus exposed to those threat actors. In the event of a CVE in whatever tools they used to create the SHM router app, one can very easily use shodan.io or other tools to get a list of every AT&T router which is guaranteed to have SHM installed and enabled. It's implementation is not available so I have no way of verifying that it's secure or not.
That DNS solution would work but would increase latency and I shouldn't have to spend more money.
0
0
dave006
Scholar
•
3.7K Messages
2 months ago
Then just hard code your DSN settings in each client at no cost to you.
Dave
0
0
JefferMC
ACE - Expert
•
31.6K Messages
2 months ago
Smart Home Manager, per se, is not installed in your Gateway. Smart Home Manager is a service hosted by AT&T in their servers with access via web application and iOS and Android Mobile Apps that does interact with your Gateway via a private management connection. Yes, it is on the cloud. Yes, it could be attacked. No, there's no way to turn off "your" Smart Home Manager. Thus, as dave006 suggested, keep your AT&T credentials safe, and use a "password" with a significant number of bits with as much randomness as you can stand.
0
0