Live data from Hacker News

MikroTik routers are forwarding owners’ traffic to unknown attackers

blog.netlab.360.com

81–90 of 151 posts

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#81

Earlier quoted context omitted.

> ASICs are roughly 100x more power-efficient at essentially any crypto mining algorithm That's half of the problem. The other half is that cryptocurrencies rely, in a structural way, on their generation to be difficult, so when enough ASICs get deployed, the currency ups its "difficulty factor", multiplying the amount of power you have to burn for the same reward. Really, if I were a supervillain who wanted to accel…

If I were a socialist who was politically opposed to the huge benefits of cryptocurrency gaining major adoption I would boil it down to "exploiting human greed" and pretend it's operating under the assumption that the energy expenditures are a "waste" and therefor detrimental to climate change. If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling curre…

> If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling currency, I feel bad for you.

Show, don't tell. If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#82
post #71
post #57

Earlier quoted context omitted.

The ERL family is pretty bad as a router, in my experience. There is a longstanding firmware issue that introduces packet loss for routed packets (it doesn't multiplex across the dual cores correctly, which leads to out of order packets). If you really want to use Ubiquiti, I would suggest using an ER-X which is cheaper, doesn't have this problem, and is quadcore. The best option in my opinion is something Intel base…

> There is a longstanding firmware issue that introduces packet loss for routed packets Interesting, do you have any more about this? Got an ER-PoE that intermittently loses packets and have never got to the bottom of why (I gave up and bought a non-Ubnt router, just haven’t got around to configuring it yet).

https://community.ubnt.com/t5/EdgeRouter/UDP-packet-loss-on-...

I was one of the people involved in some of the measurements on there.

I avoid ubnt networking gear in general after that experience (although ER-X seems good and I use one at home as a smart switch). Their specialty is in APs, which work really great.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#83
post #81

Earlier quoted context omitted.

If I were a socialist who was politically opposed to the huge benefits of cryptocurrency gaining major adoption I would boil it down to "exploiting human greed" and pretend it's operating under the assumption that the energy expenditures are a "waste" and therefor detrimental to climate change. If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling curre…

> If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling currency, I feel bad for you. Show, don't tell. If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.

> Show, don't tell.

Sure. Should we start with the estimated 262 million counts of democide committed last century?

http://www.hawaii.edu/powerkills/20TH.HTM

Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment?

> If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.

Absolutely untrue. That requires you to assume the audience is both intellectually capable of understanding a complex proposition, and that it hasn't been sufficiently biased against or indoctrinated against an opposing view. While I'm sure there is some correlation between familiarity with a given subject and one's ability to explain it, you would be making a gigantic leap in assuming this automatically means a given audience is going to adequately understand the argument.

That is also completely aside from the assumption that my comments were intended to make a compelling case on the matter outside of the person I was responding to. I'm not really convinced that wouldn't be a waste of time, but maybe I'll be surprised.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#84
It's worth pointing out that the default configuration of almost every Mikrotik router these days comes with a firewall that blocks inbound access to all ports. Admins have to go out of their way to expose winbox to the internet (as many did - including myself - under the belief the protocol was somewhat secure running over TLS).

Unfortunately NIH syndrome runs at an all time high at Mikrotik. Even the RouterOS webserver and SMB implementations were custom written, and both were later found to contain remotely exploitable bugs. I'm sure there are other holes lurking in their implementations of ipsec, openvpn, etc, so I no longer open up anything and rely on port forwarding to more secure and battle-tested services like OpenSSH / Wireguard for remote management.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#85
post #54

Earlier quoted context omitted.

I am curious what type of things you're running on your router. I have an ER-X, but haven't ever thought to run software on it (aside from some of the obvious packages like VPN and such).

Which VPN do you run on it? Wireguard? How's the performance, I ask as I too have an ER-X.

Not OP, but, I use the built in IPSec vpn. I have been looking into WireGuard though.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#86

Earlier quoted context omitted.

> ASICs are roughly 100x more power-efficient at essentially any crypto mining algorithm That's half of the problem. The other half is that cryptocurrencies rely, in a structural way, on their generation to be difficult, so when enough ASICs get deployed, the currency ups its "difficulty factor", multiplying the amount of power you have to burn for the same reward. Really, if I were a supervillain who wanted to accel…

If I were a socialist who was politically opposed to the huge benefits of cryptocurrency gaining major adoption I would boil it down to "exploiting human greed" and pretend it's operating under the assumption that the energy expenditures are a "waste" and therefor detrimental to climate change. If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling curre…

We seem to have a difference in base assumptions. I'd like to preserve and further the technological civilization. You seem to want to shut it down.

> the compound harm to the environment (for starters) of nations states existing and controlling currency

Do you believe that nation states exist solely, or primarily, to control currency? Currency is the blood of the nation, yes, but nation states form organically, to further interests of groups of people. Whenever you have more than a dozen people in one place, you get hierarchical governance, and the more people you add, the more that hierarchy grows vertically to cope with the load. With millions of people, you arrive at some form of states; add couple wars into the mix, and you arrive at modern sovereign nation states.

Point being, if cryptocurrencies were to break states' control over money - and what I guess you hope for - destroy states entirely, after lots of blood unnecessarily shed, the states would be back in some form. It's doubtful though, that cryptocurrencies would survive the process. They need computing and Internet to work, and computers&Internet need stable global economy to exist. Break the economy, break the supply chains, and modern technology evaporates.

Along with 90% of urban population starving to death.

> you should know you're rightly fearful of this technology, because it's going to play a major factor in your future demise

Yes, I'm fearful, because this technology is tuned in with the markets just well enough that it may propagate, whether governments want it or not, and grow to the point of burning out most of our non-renewable energy sources, with little to show for it, before someone finally puts a stop to it.

--

I've painted a bleak worst-case scenario above, but I sincerely hope cryptocurrenicies as we know today will fizzle out and be remembered just as another scam, one with absurdly large ecological footprint. I'm not against distributed ledgers, distributed consensus, or even new designs for money. I'm just against stupidly inefficient solutions exacerbating the biggest problems humanity faces.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#87
post #14

Can anyone suggest a wireless router that someone can buy today that either ships with or can be flashed with OSS firmware? I've been trying to shop around for one compatible with DD-WRT or OpenWRT and been rather disheartened so far; every promising model I've found either requires you to play roulette with the specific hardware version of the router that you receive (which is never advertised on product pages), or…

Here's a list of recommended ones from OpenWRT https://openwrt.org/toh/recommended_routers.

I would assume that they are easy to flash and high compatible.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#88
post #14

Can anyone suggest a wireless router that someone can buy today that either ships with or can be flashed with OSS firmware? I've been trying to shop around for one compatible with DD-WRT or OpenWRT and been rather disheartened so far; every promising model I've found either requires you to play roulette with the specific hardware version of the router that you receive (which is never advertised on product pages), or…

How about a $15.88, small but surprisingly capable, NEXX WT3020? [0]

[0] https://www.aliexpress.com/item/Wifi-Router-NEXX-WT3020H-300...

[1] https://wiki.openwrt.org/toh/nexx/wt3020

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#89
post #84

It's worth pointing out that the default configuration of almost every Mikrotik router these days comes with a firewall that blocks inbound access to all ports. Admins have to go out of their way to expose winbox to the internet (as many did - including myself - under the belief the protocol was somewhat secure running over TLS). Unfortunately NIH syndrome runs at an all time high at Mikrotik. Even the RouterOS webse…

This explains a lot.

Mikrotik boxes are really quirky. They basically have user-facing bugs, symptoms of which can have no explanation except for them fronting some massive clusterfuck on the inside. They used to do bizarre things with timestamps of freshly copied files, when the modified time would oscillate around some convergence point. Some wierd directory names (like .popup ?) were reserved for no apparent reason and an attempt to create them failed with "file not found". That sort of thing. And we even didn't own any of their devices, we were just in a splatter zone from our clients constantly walking into Mikrotik issues. It was few years ago though, so perhaps things have improved since then.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#90

Earlier quoted context omitted.

If I were a socialist who was politically opposed to the huge benefits of cryptocurrency gaining major adoption I would boil it down to "exploiting human greed" and pretend it's operating under the assumption that the energy expenditures are a "waste" and therefor detrimental to climate change. If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling curre…

We seem to have a difference in base assumptions. I'd like to preserve and further the technological civilization. You seem to want to shut it down. > the compound harm to the environment (for starters) of nations states existing and controlling currency Do you believe that nation states exist solely, or primarily, to control currency? Currency is the blood of the nation, yes, but nation states form organically, to f…

> We seem to have a difference in base assumptions. I'd like to preserve and further the technological civilization. You seem to want to shut it down.

Not sure where you're getting that from. I do not want to "shut it down," quite the opposite.

> Do you believe that nation states exist solely, or primarily, to control currency?

No, but control of currency is a major factor in their sustained existence.

> Currency is the blood of the nation, yes, but nation states form organically, to further interests of groups of people. Whenever you have more than a dozen people in one place, you get hierarchical governance, and the more people you add, the more that hierarchy grows vertically to cope with the load.

Nation states are a symptom of obsolete social organization technology. They result in massive human suffering and hampering of technological growth. Their formation, whether "organically" or not, is irrelevant.

> With millions of people, you arrive at some form of states;

States neither require millions of people, nor are they a necessary result of millions of people existing.

> add couple wars into the mix, and you arrive at modern sovereign nation states.

Is this intended as an indictment?

> Point being, if cryptocurrencies were to break states' control over money - and what I guess you hope for

Yes.

> after lots of blood unnecessarily shed

"Unnecessarily" is a large assumption. And ideally it would happen with as little violence as possible, preferably none. When contrasted with the scale of the crimes of nation states, however, it seems difficult to make a case for their continued existence, even with massive short term casualty.

> the states would be back in some form.

What are you basing this assumption on? I think there is a strong case that social organizing technology is likely to result in nation states being made obsolete over time. The contradicting viewpoint is not substantiated by much, I suspect.

> It's doubtful though, that cryptocurrencies would survive the process. They need computing and Internet to work, and computers&Internet need stable global economy to exist. Break the economy, break the supply chains, and modern technology evaporates.

Computing and networking are not dependent on the existence of nation states. A stable global economy is especially not dependent on them -- in fact, nation states are quite probably the largest cause of global instability, economically and otherwise. Preferably, a transition away from nation states happens using technology itself. Cryptocurrency is likely to play a major role in this.

> Along with 90% of urban population starving to death.

A sudden overnight collapse of nation states might very well lead to large deaths, although probably not at this scale. This is not likely to happen, and certainly not likely to happen as a result of mass cryptocurrency adoption.

> Yes, I'm fearful, because this technology is tuned in with the markets just well enough that it may propagate

I'm glad you've admitted your remarks about cryptocurrency being wasteful and harmful to the environment are motivated by trying to suppress its existence.

> whether governments want it or not

As opposed to free people...

> and grow to the point of burning out most of our non-renewable energy sources

Ridiculous.

> with little to show for it, before someone finally puts a stop to it

Good luck.

> I've painted a bleak worst-case scenario above

You've spread fear-based propaganda based on an issue you clearly have made a lot of seemingly fear-based (as opposed to reasoned) assumptions about.

> I sincerely hope cryptocurrenicies as we know today will fizzle out and be remembered just as another scam

You fear the change that this technology brings, so you hope it is suppressed and remembered for being something you (possibly) understand it is not?

> I'm not against distributed ledgers, distributed consensus, or even new designs for money.

These are the potential benefits of cryptocurrency.

> I'm just against stupidly inefficient solutions exacerbating the biggest problems humanity faces.

Even a grossly less efficient method for mining cryptocurrency would be preferable to the problems caused by the continued existence of nation states, and probably by their control of currency alone, not even factoring in all of their other crimes.

The biggest problem humanity faces is the existence of nation states, and the resulting democide and destruction, as well as potential existential threats of nuclear annihilation or other destruction. In the pursuit of perpetuating themselves, nation states are also likely major limiting factors in technological advance, which is the single greatest factor in preventing human suffering.

Post reply on HN