MikroTik routers are forwarding owners’ traffic to unknown attackers • Hacker News Board

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#91

Post by darawk » Tue, Sep 04, 2018, 4:31 PM UTC

TeMPOraL wrote: post #86

ruskerdax wrote: post #76

Earlier quoted context omitted.

If I were a socialist who was politically opposed to the huge benefits of cryptocurrency gaining major adoption I would boil it down to "exploiting human greed" and pretend it's operating under the assumption that the energy expenditures are a "waste" and therefor detrimental to climate change. If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling curre…

We seem to have a difference in base assumptions. I'd like to preserve and further the technological civilization. You seem to want to shut it down. > the compound harm to the environment (for starters) of nations states existing and controlling currency Do you believe that nation states exist solely, or primarily, to control currency? Currency is the blood of the nation, yes, but nation states form organically, to f…

I agree with your assessments of governments, but your assessments of power issues are pretty misguided.

You seem to be arguing that demand for renewable power will...make there be less renewable power available? Which is not really how economics works. Creating lots of power demand isn't going to make us like, run out of sunlight. It's going to raise the price of power. It's going to compensate people for building more capacity. It's going to do all the things that we want.

In fact, by providing a constant demand for excess power generation which is currently hard to store, crypto-currencies can substantially improve the economic profile of building out lots of capacity that otherwise wouldn't make economic sense.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#92

Post by kbenson » Tue, Sep 04, 2018, 4:34 PM UTC

ruskerdax wrote: post #83

kbenson wrote: post #81

Earlier quoted context omitted.

> If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling currency, I feel bad for you. Show, don't tell. If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.

> Show, don't tell. Sure. Should we start with the estimated 262 million counts of democide committed last century? http://www.hawaii.edu/powerkills/20TH.HTM Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment? > If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.…

> That requires you to assume the audience is both intellectually capable of understanding a complex proposition

Being able to explain a complex topic simply is the point. Knowing how to distill the concept to essential points is useful, and if you can't identify the essential points, you probably don't really understand it.

> and that it hasn't been sufficiently biased against or indoctrinated against an opposing view.

> you would be making a gigantic leap in assuming this automatically means a given audience is going to adequately understand the argument.

I didn't say convince, I said explain. Indoctrination is irrelevant. Assume your audience is willing to hear you out, as otherwise all you are doing is yelling at people rather than conversing with people, and that's not acting in good faith.

> the assumption that my comments were intended to make a compelling case on the matter outside of the person I was responding to.

Yes, the assumption is that you are trying to contribute with your comments, and not just tell someone they are wrong without explanation, as the site guidelines specifically disallow that.

> Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment?

You seem to be working under the assumption I disagree with you. I don't recall doing anything other than asking you to explain your reasoning. Do you consider that an aggressive argument against your point?

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#93

Post by ruskerdax » Tue, Sep 04, 2018, 4:39 PM UTC

kbenson wrote: post #92

ruskerdax wrote: post #83

Earlier quoted context omitted.

> Show, don't tell. Sure. Should we start with the estimated 262 million counts of democide committed last century? http://www.hawaii.edu/powerkills/20TH.HTM Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment? > If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.…

> That requires you to assume the audience is both intellectually capable of understanding a complex proposition Being able to explain a complex topic simply is the point . Knowing how to distill the concept to essential points is useful, and if you can't identify the essential points, you probably don't really understand it. > and that it hasn't been sufficiently biased against or indoctrinated against an opposing v…

Cool, you ignored half my comment to engage in dishonest bickering filled with more assumptions as to my motivations. Are you having fun?

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#94

Post by stordoff » Tue, Sep 04, 2018, 4:41 PM UTC

sokoloff wrote: post #19

kibwen wrote: post #14

Can anyone suggest a wireless router that someone can buy today that either ships with or can be flashed with OSS firmware? I've been trying to shop around for one compatible with DD-WRT or OpenWRT and been rather disheartened so far; every promising model I've found either requires you to play roulette with the specific hardware version of the router that you receive (which is never advertised on product pages), or…

I just last weekend retired a pair of Asus RT-AC66U routers/access points. They ran stable for years on Tomato (version tomato-RT-AC66U_AT-RT-AC6x-3.4-140-AIO-64K.trx) and I think all the hardware revisions work, but confirm that yourself. I retired them mostly because the Ubiquiti management is much easier and that hardware also affordable (though the software is not open, so not a fit for your use case).

I've been running a RT-AC68U for a while. Rock solid stable on Asuswrt-Merlin[1] (204 days uptime last I checked, and the last reboot was due to a power cut, and easily get 50MB/s to my file server over wireless). The Asuswrt interface is a little clunky, but once it's set up it works fine. I've recently changed to Tomato (needed VLAN tagging for wireless), which seems just as solid (55-60MB/s to file server), but I haven't tested WAN/NAT performance (moved to a pfSense box).

[1] DD-WRT struggled with 100Mbps to WAN - hardware NAT

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#95

Post by jessaustin » Tue, Sep 04, 2018, 4:43 PM UTC

I always disable winbox on installation.

  /ip service disable winbox

Why would anyone want to use that? My theory is that it has something to do with how in many cases the MT sshd has to be told to figure out the terminal:

  $ ssh user+t@192.168.88.1

...and this information is really hard to find. If the terminal settings aren't right and you can't fix them, ssh is unusable and you're stuck with either winbox or webfig. Fortunately, if the ssh session is wrapped in a mosh session then mosh will handle MT's terminal settings.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#96

Post by jessaustin » Tue, Sep 04, 2018, 4:53 PM UTC

dboreham wrote: post #8

isostatic wrote: post #6

My home router has the following /ip firewall filter add action=accept chain=input connection-state=established add action=accept chain=input connection-state=related add action=accept chain=input dst-port=5000 protocol=udp add action=accept chain=input dst-port=6000 protocol=udp add action=accept chain=input dst-port=6001 protocol=udp add action=accept chain=input protocol=icmp add action=accept chain=input dst-port…

Also change the winbox port if you need it to be enabled.

That's a way not to be the low-hanging fruit, but if someone wants this port they're going to find it.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#97

Post by dang » Tue, Sep 04, 2018, 5:00 PM UTC

kbenson wrote: post #92

ruskerdax wrote: post #83

Earlier quoted context omitted.

> Show, don't tell. Sure. Should we start with the estimated 262 million counts of democide committed last century? http://www.hawaii.edu/powerkills/20TH.HTM Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment? > If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.…

> That requires you to assume the audience is both intellectually capable of understanding a complex proposition Being able to explain a complex topic simply is the point . Knowing how to distill the concept to essential points is useful, and if you can't identify the essential points, you probably don't really understand it. > and that it hasn't been sufficiently biased against or indoctrinated against an opposing v…

Can you please not do flamewars on HN? Such tedious tit-for-tat exchanges aren't of general interest, or even of individual interest once the heat dies down.

https://news.ycombinator.com/newsguidelines.html

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#98

Post by titzer » Tue, Sep 04, 2018, 5:00 PM UTC

ruskerdax wrote: post #83

kbenson wrote: post #81

Earlier quoted context omitted.

> If you can't understand the compound harm to the environment (for starters) of nations states existing and controlling currency, I feel bad for you. Show, don't tell. If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.

> Show, don't tell. Sure. Should we start with the estimated 262 million counts of democide committed last century? http://www.hawaii.edu/powerkills/20TH.HTM Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment? > If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.…

> Absolutely untrue. That requires you to assume the audience is both intellectually capable of understanding a complex proposition

I downvoted this, but now I'm gonna reply to explain why. This is a veiled insult against your audience, and as such it's both a fallacy and a bad-faith argument. The rest of the sentence, too. Let's not do "I'm smarter than you all and you're all biased" here, please. It just makes the forum a shade uglier.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#99

Post by dang » Tue, Sep 04, 2018, 5:00 PM UTC

ruskerdax wrote: post #93

kbenson wrote: post #92

Earlier quoted context omitted.

> That requires you to assume the audience is both intellectually capable of understanding a complex proposition Being able to explain a complex topic simply is the point . Knowing how to distill the concept to essential points is useful, and if you can't identify the essential points, you probably don't really understand it. > and that it hasn't been sufficiently biased against or indoctrinated against an opposing v…

Cool, you ignored half my comment to engage in dishonest bickering filled with more assumptions as to my motivations. Are you having fun?

Can you please not do flamewars on HN? Incivility like this will get you banned here regardless of how provocative some other comment was.

Edit: I'm sorry to see that you've done this repeatedly before. If you would please review https://news.ycombinator.com/newsguidelines.html and follow the rules when posting here in the future, we'd appreciate it.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#100

Post by kbenson » Tue, Sep 04, 2018, 5:01 PM UTC

ruskerdax wrote: post #93

kbenson wrote: post #92

Earlier quoted context omitted.

> That requires you to assume the audience is both intellectually capable of understanding a complex proposition Being able to explain a complex topic simply is the point . Knowing how to distill the concept to essential points is useful, and if you can't identify the essential points, you probably don't really understand it. > and that it hasn't been sufficiently biased against or indoctrinated against an opposing v…

Cool, you ignored half my comment to engage in dishonest bickering filled with more assumptions as to my motivations. Are you having fun?

> you ignored half my comment

I originally ignored the portion that mistakenly assumed I had a position against your point that aggressively insinuated I believed mass murder was acceptable. I revised my comment right after posting it to append a clarification on that.

> to engage in dishonest bickering

Please do not accuse me of being dishonest without being sure backing up your words with some sort of reasoning. I'm not being dishonest. I think you are not engaging usefully, and attempted to rectify that by asking for more information, and then to explain my reasoning when it was called into question, exactly as I suggested you do originally.

> filled with more assumptions as to my motivations

I'm not sure I assumed a single thing about you. I couched all my statements generically on purpose.

I think you are stuck in a context where you are interpreting me as attacking you. if you truly think I'm being dishonest or attacking you, don't reply. If you think I'm wrong, explain how I'm wrong. If you have problems explaining why I'm wrong, perhaps reexamine the assertion that I am. I'm fully willing to entertain that I'm wrong, and admit it. It wouldn't be the first time I've done so.