Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

ctrl.blog

Post reply on HN
Print view View original

61–70 of 245 posts

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#61

Post by QasimK »

herpderperator wrote: post #59

Don't bother with repeaters. Get normal access points, and install several of them if you need to disperse the range around a large area/building/complex. If the SSID and security passphrases match, clients will roam seamlessly between the different APs. I suspect the reason people buy repeaters is that they don't realise that this is possible, or they don't want additional cabling. Repeaters add latency and I can't…

Well you’re normal WAP needs to be connected to the network itself somehow. A repeater does it wirelessly, while a normal WAP may not even have that option.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#62

Post by jagermo »

gh02t wrote: post #24
Thlom wrote: post #17

Earlier quoted context omitted.

The Ubiquity Unifi stuff looks good and not very expensive.

Speaking from experience, it is good. Takes a bit of networking know-how to set it up though, and you still need a router. Their consumer oriented stuff like the AmpliFi is quite excellent too and a bit friendlier. I use an Edgerouter Lite, a Mikrotik switch and UniFi APs for myself and was so pleased I bought the AmpliFi mesh for my parents.

I have a similar setup, without the switch and the Unifi APs are just excellent. Smooth setup, great range.

So, if you can run a cable, I second Unifi.

Op, if you can not run a cable, maybe look into a mesh network. Repeaters "loose" about half of the bandwidth anyway, a mesh might be good alternative.

If you want to set up an open source enviroment, there is libremesh (http://libremesh.org).

If you just want to buy something, there are products from Netgear (orbi), Linksys (Velo) or Ubiquiti (Amplifi). If you have a Fritz!Box-setup from AVM, you might be able to use their mesh features (site in German, because if you have a FritzBox, you probably speak German ;) https://avm.de/mesh/)

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#64

Post by dsharlet »

cthalupa wrote: post #36
Johnny555 wrote: post #22

Earlier quoted context omitted.

What's the point of the NTP pool providers making their concerns public when consumers like you, who apparently are aware of the issue and what it means, don't care because TP-Link makes a "good product"? Your attitude kind of reminds of the people that toss their cigarettes out their car window. When confronted they'll say something like "But my car doesn't have an ashtray, this is easier" or "But I don't want used…

Because I'll be more concerned if the NTP pool providers say "This is detrimental to our services" than if a random 3rd party blog (that has apparently not even checked their math) says I should worry about it.

TP-link is clearly ignoring many of the instructions from NTP: http://www.pool.ntp.org/vendors.html

Notably, they are ignoring the ones that make it possible for NTP to be aware of the problem in the first place. Right now, TP-link's traffic probably just looks like millions of unrelated devices misconfigured. NTP wants vendors like this to make requests to a particular subdomain so they can identify problematic vendors in the first place.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#65

Post by jlgaddis »

proctor wrote: post #45
ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

Also, I maintain a page[0] that lists the top routers with support for openWrt and DD-wrt. http://rooftopbazaar.com/routerfirmware/

Nice referral links on your page. I see from your comment history that you've spammed HN with it several times in the past as well.

---

Edit: To be clear, there's nothing inherently wrong with affiliate links. To me, though, it's the same as someone here mentioning their product or service in a comment without disclosing their affiliation.

It's one thing to tell another person "The FooBar 9000 is a good router.". It's quite another to say, "The FooBar 9000 is the BEST router on the market. Oh, look, here's Joe. He sells those and you can buy one from him right now.", without mentioning you have previously worked out a deal with Joe.

It's not the affiliation that's the issue. It's the lack of transparency about the affiliation. (And, in this case, for me personally, it's that the OP apparently tries to work in a link to his page anywhere he can in HN conversations.)

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#66

Post by jlgaddis »

jml7c5 wrote: post #50
jlgaddis wrote: post #39

Earlier quoted context omitted.

OpenWRT/LEDE firmware is nice. I think I first used it with the (original) WRT54G. The future of the project is uncertain, however. They may or may not be around much longer.

>The future of the project is uncertain, however. They may or may not be around much longer. Can you elaborate on this?

In a nutshell: OpenWRT existed. They kinda sorta pretty much stopped doing anything. LEDE sprang up as a fork, with several of the OpenWRT folks. Then they all decided to work together and joined back up. Now it's anybody's guess what will happen next, if anything, as nothing has really happened since.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#67

Post by konart »

ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

Is there any reason to switch from OpenWrt yet?

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#68

Post by gsich »

konart wrote: post #67
ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

Is there any reason to switch from OpenWrt yet?

OpenWrt was basically dead after devs switched to LEDE.

But they are remerging again, it just takes some time, so use LEDE if you install something now.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#69

Post by ksec »

ktta wrote: post #55
bubblethink wrote: post #29

Earlier quoted context omitted.

>You will be able to do a lot more with your router and they have quick security fixes Just a counter point to this. Lede on its own doesn't have a very smooth in place upgrade system. If you are in the loop, sure you can do upgrades, but most people would never log in to their routers after setting it up. I think something like google wifi is not a bad solution either, with the obvious privacy tradeoff. It runs chro…

I realize people's opinions differ on this, but having Google's wifi router is one of the most privacy compromising things one can do. Security wise, sure, great idea. But there's so much data to collect at the router level. From wireless MAC addresses (which it already does), and to every single IP address visited by every device in the household. I might sound paranoid, but with continuous news of Google's privacy…

Apple Airport is probably the best router I have ever owned. Not the fastest, but extremely Stable, based on NetBSD and from a company that makes money on my hardware rather then my Data.

I really hope they will have an 802.11ax version once they iron out all the crap that is going on in there.

Post reply on HN