Earlier quoted context omitted.
The irony of using a shortened link in a comment on cyber security.
Non-shortened link: https://supportannouncement.us.dlink.com/announcement/public...
D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
11–20 of 306 posts
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#12This is precisely why I chose to install DD-WRT on all my routers. Not only does it give me more fine grain control over all my admin privileges, I know I don't have to rely on some company making the cost-benefit decision over if it's worth patching security bugs.
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#13Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.
You always kind of get what you pay for. If you pay an annual maintenance, then you can expect regular and secure updates, otherwise you are buying the product as is at time of purchase.
Then again, I buy stuff that can be flashed with OpenWRT ...
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#14It's times like this i'm glad my home router is a x86 mini PC running Arch Linux + iptables + Unifi (Complete with DNS MITM forcing all DNS out of my apartment over TLS)
I'm more of an app developer that does DevOps stuff when I have to. Is this something I can get done in a day or so? Is a Raspberry Pi enough, or do I need something more powerful?
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#15For national security sake all routers should be required to support open firmwares.
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#16Having sorted this out, let me clearly state that the only ethical solution is to brick these devices offline.
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#17Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#18Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.
What do you expect from companies that sell kit at $50/£50/€50? You always kind of get what you pay for. If you pay an annual maintenance, then you can expect regular and secure updates, otherwise you are buying the product as is at time of purchase. Then again, I buy stuff that can be flashed with OpenWRT ...
I'd expect cheap mass-produced routers to be around $15 - $25, like an immersion blender.. I don't quite understand why cheap ones are still $40-$60.
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#19Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.
What do you expect from companies that sell kit at $50/£50/€50? You always kind of get what you pay for. If you pay an annual maintenance, then you can expect regular and secure updates, otherwise you are buying the product as is at time of purchase. Then again, I buy stuff that can be flashed with OpenWRT ...
Re: D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
#20Until there is some legally required amount of time to provide security updates for connected devices, I would expect the "buy a new one if you want to be protected" response to continue indefinitely.
What do you expect from companies that sell kit at $50/£50/€50? You always kind of get what you pay for. If you pay an annual maintenance, then you can expect regular and secure updates, otherwise you are buying the product as is at time of purchase. Then again, I buy stuff that can be flashed with OpenWRT ...