Your Router Can Be Hacked From a Web Page

That’s one of the topic discussed at the RSA conference by Dan Kaminsky. His point is that web browser design flaws can let hackers change the settings of your router and open the door for an attack.

Upon visiting a web page, Javascript code could be used to access the router configuration page and modify the security settings. Of course, I imagine that widely popular routers with default local IP addresses, administration login and passwords would be more vulnerable to such an attack, so changing these would offer very good protection. Also, it would be nice if the browser could not be tricked into doing such things in the first place.