In the latest review by Which Magazine about security flaws with routers, they have included Vigin Media's Super Hub and Super Hub 2 as vulnerable because of 'Weak Password' and 'Lack of Updates' .
I am concrened about this because I have had my Super Hub since 2016. and since recently the speed has dropped considerably. I am on M200 and only getting 60Mbps. I have been in touch with technical support and they say that there is a problem in the area and expect the problems to be resolved in the next few days.
Do others have concerns about the security of the Super Hub 2? Is the hub security linked to the speed issues people are experiencing?
You are mentioning two separate issues - your speed issue and the security issue claimed by the Which article.
If VM have identified a speed issue in your area then there is not too much you can do immediately on the speed problem until the area fault is cleared.
On the matter of the Which article claiming security problems, the article and its sources are somewhat light on detail as to what the perceived threats are. AIUI, the article was comparing old routers against the government's new 'Secure by Design' standards.
The main, and most obvious, issue in the case of the SH2 is changing the default administrative passwords which were all the same for all units when produced. The default wi-fi settings and passwords may also be weak compared to current standards but can be improved by the user changing them to something more current/secure.
The Which article mentions other vulnerabilities when a potential hacker was 'in the vicinity' of the router but doesn't elaborate on what that means. It might be the wireless issue mentioned above or may mean any hacker has to be connected to the user's network.
VM have denied any security issues with the older equipment. In the recent past VM have offered upgrades to SH2 users and below but I am not sure where that stands now as there have been mentions on the forum of Hub 3 units being in short supply. AIUI, VM have been recycling equipment which is still current for reuse, so you may get a 'new' hub that has previously been used by someone else
One of the forum team staff should be able to advise if you can currently get an upgrade or not to a newer VM hub.
"In the recent past VM have offered upgrades to SH2 users and below but I am not sure where that stands now as there have been mentions on the forum of Hub 3 units being in short supply."
As someone who still has a hub 2, (and has been having problems recently) I have tried to get an upgrade to hub 3, only to be told that I would need to upgrade my package to get one, that there were no 'free' upgrades to hub 2, (as I am only on the 100 meg package).
Don't really need more speed, just a reliable hub, but VM don't seem to agree, so looks like no upgraded hubs, unless you upgrade package as well...
Thanks for your reply and the link. I have alreday set up password etc. My main concern is the lack of updates to the firmware for the older hubs. What is the policy for upgrading to the latest hub model? Does one have to upgrade the package as well? I would have thought that Virgin would be interested in the 'security' for their customer's broadband connections and would automatically offer upgrades of the equipment (Hub) when new more secure models are introduced.
As the blog concludes the longer the password the more mathematically improbable it is for it to be cracked (https://xkcd.com/936/ is a famous computing cartoon based explanation of that). Which just reinforces the point that Virgin Media have appalling security for their customer online accounts. It has been mentioned multiple times on this forum but to recap:
Virgin enforce weak passwords (i.e. limit of 10 characters)
Virgin breach industry and government standards with your passwords.