Kyle Lovett MEMBER_OF Veracode
Kyle Lovett says he is a Senior Penetration Tester with Veracode.
Explicit Confidence 99% · Kyle Lovett EP 5 Details
“I am a Senior Penetration Tester right now with Veracode.”
Episode
01 November 2017 Official episode · Official transcript
bug hunter research
Kyle Lovett discovers extensive security weaknesses in the ASUS N66 router, including anonymous FTP access, exposed cleartext credentials, default passwords, and vulnerable cloud functionality. The disclosure leads to public attention, an ASUS remediation effort, and an FTC settlement requiring long-term security audits.
Topics: ASUS router security, anonymous FTP exposure, cleartext credential storage, default credentials, unauthenticated file access, AI Cloud remote administration, VPN abuse and proxying, internet-wide scanning, zero-day vulnerabilities, penetration testing, fuzzing, responsible disclosure, partial disclosure, full disclosure, vulnerability coordination, security audits and software updates
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Kyle Lovett MEMBER_OF Veracode
Kyle Lovett says he is a Senior Penetration Tester with Veracode.
Explicit Confidence 99% · Kyle Lovett EP 5 Details
“I am a Senior Penetration Tester right now with Veracode.”
The router discussed is an ASUS N66, and ASUS is described as the maker of the router.
Explicit Confidence 97% · Jack Rhysider EP 5 Details
“Asus, the makers of this router”
default admin/admin credentials AFFECTS ASUS N66
The ASUS N66 used admin/admin as its default username and password without prompting users to change it.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“the default user name was admin and the default password was also admin”
anonymous FTP access AFFECTS ASUS N66
The router's FTP server exposed port 21 with anonymous access.
Explicit Confidence 99% · Kyle Lovett EP 5 Details
“port 21 was open with anonymous access”
cleartext password exposure AFFECTS ASUS N66
The router stored its username and password in clear text in an accessible file.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“the password was stored in clear text in just a plain file”
unauthenticated directory traversal or file exposure AFFECTS ASUS N66
The router exposed an unprotected directory structure and files without authentication.
Explicit Confidence 98% · Kyle Lovett EP 5 Details
“The clear text password was in an unprotected directory structure”
cleartext password exposure AFFECTS AI Cloud
When AI Cloud was enabled, the router's clear-text password could be reached from outside.
Explicit Confidence 96% · Kyle Lovett EP 5 Details
“I was able to get to it from the outside as well with a clear text password”
Kyle Lovett USES penetration testing
Kyle used his penetration-testing skills while examining the router.
Explicit Confidence 98% · Jack Rhysider EP 5 Details
“Kyle used his penetration testing skills to see if he could find something else”
Kyle Lovett USES fuzzing
Kyle says he began looking and fuzzing the router.
Explicit Confidence 99% · Kyle Lovett EP 5 Details
“I just started looking and fuzzing”
Kyle Lovett USES Shodan
Kyle used Shodan to estimate how many vulnerable routers were exposed on the internet.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“Kyle used a website called Shodan to try to understand the size of this problem”
default admin/admin credentials DISCOVERED_BY Kyle Lovett
Kyle found the default admin/admin credential issue during his testing.
Derived Confidence 95% · Kyle Lovett EP 5 Details
“then you had the bigger problem of the default passwords which was admin/admin”
anonymous FTP access DISCOVERED_BY Kyle Lovett
Kyle found the anonymous FTP access problem while testing his router.
Derived Confidence 96% · Kyle Lovett EP 5 Details
“I realized that port 21 was open with anonymous access”
cleartext password exposure DISCOVERED_BY Kyle Lovett
Kyle found the clear-text password exposure by browsing to the exposed file.
Derived Confidence 95% · Kyle Lovett EP 5 Details
“That only took me maybe twenty, twenty-five minutes to find”
ASUSGATE concerns security flaws and responses involving ASUS routers and ASUS as the vendor.
Explicit Confidence 90% · Jack Rhysider EP 5 Details
“this incident ASUSGATE”
ASUSGATE involved the ASUS router model that Kyle tested and related ASUS router models.
Derived Confidence 95% · Jack Rhysider EP 5 Details
“The vulnerabilities he found were present on ten different Asus router models”
ASUSGATE INVOLVES anonymous FTP access
The incident involved anonymous FTP servers on vulnerable ASUS routers.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“found just over ten thousand IPs that were running the anonymous FTP server”
ASUSGATE INVOLVES cleartext password exposure
The incident involved public disclosure of the clear-text password flaw.
Explicit Confidence 98% · Kyle Lovett EP 5 Details
“That’s when I went on there and I put that one disclosure about the clear text password”
ASUSGATE ASSOCIATED_WITH 4Chan
The note was signed by /G, which Jack says may mean the hackers originated from 4Chan's technology board; the association is uncertain.
Uncertain Confidence 84% · Jack Rhysider EP 5 Details
“This may mean the hackers originated from the technology board on 4Chan which uses /G as their name”
US-CERT PART_OF U.S. Department of Homeland Security
US-CERT is described as a branch of the U.S. Department of Homeland Security.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“The Department of Homeland Security has a branch called The US Computer Emergency Readiness Team”
Kyle says US-CERT works with MITRE on vulnerability disclosure and related community work.
Explicit Confidence 98% · Kyle Lovett EP 5 Details
“they’re working with DHS, they’re working with MITRE”
Kyle Lovett USES partial disclosure
Kyle used partial disclosure to pressure ASUS to address the vulnerability.
Explicit Confidence 99% · Kyle Lovett EP 5 Details
“I decided to go with the partial disclosure online”
Federal Trade Commission ASSOCIATED_WITH ASUS
The Federal Trade Commission filed a case against ASUS and later approved a settlement order.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“United States Federal Trade Commission filed a case against Asus”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-12T17:55:00.261660+00:00