Live data from Hacker News

Backdoor found in Linksys, Netgear Routers

github.com

141–144 of 144 posts

Re: Backdoor found in Linksys, Netgear Routers

#141
Thankfully I have an older WNDR3700 and I remain unaffected.

However seeing mention of (and an implementation of) Dual_ECC_DRBG in the slides immediately gives me a lot of pause regarding the security of my router. I love memes more than the next guy but this guy really went out of his way to make this confusing to understand.

Re: Backdoor found in Linksys, Netgear Routers

#142
post #108

This is not surprising. It's a calculated risk to make a product just good enough. Development resources invested in retail wireless gear is minimal. I've worked on firmware for high-confidence industrial wireless gear used in mines. Most of them fall over under load, run obsolete+unpatched code and/or reboot randomly. Retail customers will tend to just put up with it and not return the product before the merchant's…

Mining is a dangerous industry with its own specialist regulators and standards bodies. Equipment failure that can kill people should be taken more seriously than equipment failure that leads to less serious consequences. The thought of wireless gear in mines is pretty scary! I used to build / test equipment for a sub-contractor of Joy Mining and communication between the devices was carried by inch thick cables with…

There is. Mostly 460 and 900 MHz packet modems that only speak UDP. It's for telemetry data and data between trucks. As of 2000, there were working prototypes of both an anti-collision system and fully autonomous driving / grading.

Re: Backdoor found in Linksys, Netgear Routers

#143

This is not surprising. It's a calculated risk to make a product just good enough. Development resources invested in retail wireless gear is minimal. I've worked on firmware for high-confidence industrial wireless gear used in mines. Most of them fall over under load, run obsolete+unpatched code and/or reboot randomly. Retail customers will tend to just put up with it and not return the product before the merchant's…

s/Most of them/Most of the retail ones/

Not the industrial ones. They're unit tested ad-nauseum, subjected to crush and environmental testing. You can run over the units with fully-loaded haul truck, the cases are cast steel. They also retail for $10k USD a piece.

Re: Backdoor found in Linksys, Netgear Routers

#144

Thankfully I have an older WNDR3700 and I remain unaffected. However seeing mention of (and an implementation of) Dual_ECC_DRBG in the slides immediately gives me a lot of pause regarding the security of my router. I love memes more than the next guy but this guy really went out of his way to make this confusing to understand.

Hah! A Dual_EC_DRBG implementation would be an infinite improvement over the highlighted random number generator (which just calls libc functions srand(3) and rand(3)).
Post reply on HN