Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

ctrl.blog

Post reply on HN
Print view View original

191–200 of 245 posts

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#191

Post by [deleted] »

muxator wrote: post #182
ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

On LEDE, it seems that there is always an hardcoded DNS fallback to 8.8.8.8. I see it in my logs, even if none of my configuration files mentions it.

[deleted]

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#192

Post by NelsonMinar »

This kind of stupidity happens to NTP frequently. The ironic thing is NTP is so lightweight that sometimes it's better to just answer the query than try to block the traffic. The DNS traffic is more expensive than the time query!

Note this was reported on the NTP Pool Discourse about 3 weeks ago: https://community.ntppool.org/t/software-and-devices-without...

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#193

Post by lovelearning »

jlgaddis wrote: post #86
Xylakant wrote: post #80

Earlier quoted context omitted.

I fail to see the problem with affiliate links in that context. The site openly disclosed that they use affiliate links to amazon. The site provides a value, a ranked list of compatible devices. I might actually use it if I were shopping around for a device. Building and maintaining it probably takes some effort. It deserves to get paid. If you think that all for-profit pages should be banned from mention then this h…

> The site openly disclosed that they use affiliate links to amazon. Did it? I was on an iPad and only realized they were affiliate links after I clicked on one and it took to Amazon. Immediately, I looked at the URL to see if there was a referral tag in there. I then went back and noticed "DISCLOSURE" at the very bottom, in the footer, but I don't recall seeing any mention of it before that. > If you think that all…

I wanted to ignore this since I don't enjoy subjective arguments, but since you seem to be virtue signalling about disclosures, I'd like to point out that your own page with Amazon affiliate links [http://evilrouters.net/bookshelf/] does not disclose your affiliation to Amazon (which is itself a violation of section 5 of the Amazon affiliate program agreement), nor does your DISCLOSURE page (whose link is also at the very bottom right of your page). The other commentator's disclosure page (http://rooftopbazaar.com/disclosure/) comes across as a proper honest disclosure to me. Sorry, your comments seem like hypocrisy to me.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#194

Post by rrauenza »

JustSomeNobody wrote: post #175
cannam wrote: post #141

Earlier quoted context omitted.

> Powerline Ethernet is not really a good solution either. Why is that?

It's very finicky about line quality, it likes to be on the same circuit (doesn't cross breakers), and it doesn't live up to the claimed speeds.

As a no longer suffering user of X10 now enjoying ZWave, the issue is usually crossing the out of phase 110 legs (every other full size breaker in the panel is on a different leg).

To cross the phases, the signal has to go to the power pole where the phases originate. X10 has a repeater you can install and sometimes people just install a passive one (a capacitor if I recall.)

In a smaller house, signalling to the panel and back out to circuits on the same leg is more likely to work than crossing the phases.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#196

Post by guftagu »

ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

It seems like they support every model but exactly mine. I'm running TP-LINK TL-WR845N

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#197

Post by forgottenpass »

tatersolid wrote: post #151
mseebach wrote: post #79

Earlier quoted context omitted.

> I suspect [...] they don't want additional cabling. You probably suspect correctly. Not having additional cabling is a pretty big selling point of wireless technology.

Especially as the majority of homes date back more than 25 years, and retrofitted cabling is very expensive. And if you rent rather than own, you likely can’t add cabling at all under the terms of your lease.

>And if you rent rather than own, you likely can’t add cabling at all under the terms of your lease.

A POTS phonejack can use pair(s) in CAT 5 (or 5e, 6), and newish buildings often already run it to the wall jacks rather than CAT 3. Depending on access to the other end of the lines, and appetite for DIY upgrading a landlord's building, it's quite possible to temporarily swap the RJ11 hardware for some RJ45 and have a wired LAN ;)

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#198

Post by devy »

TP-Link is a major networking equipment manufacturer globally and one of the largest in China, just behind Huawei. They are one of the few who design equipment firmware/software and hardware in-house[1] and certainly have resource (man+money) to get the network protocol implementation right (sometime they don't) for their products and I wonder if the author has proactively reach out to them so that they can fix it for all (rather than public shaming and/or product ban)?

[1]: https://en.wikipedia.org/wiki/TP-Link

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#200

Post by linkmotif »

ktta wrote: post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

I put openwrt on my $20 tp-link router that couldn’t even handle a single torrent and now it functions like a beast. Installation was so easy. I just downloaded the openwrt firmware file and uploaded it using the tp-link web ui like an official update.

Software!

Post reply on HN