If we wanted secure products, we wouldn't ban devices. We'd mandate they open their firmware to audits.
FCC updates covered list to include foreign-made consumer routers
11–20 of 452 posts
Re: FCC updates covered list to include foreign-made consumer routers
#12> all consumer-grade routers produced in foreign countries Are there even consumer-grade routers that are produced in the USA...?
Time for the made in USA tin can and a string.
Hey, let's not undersell America's high-tech manufacturing capability. We could easily produce morse code keys and copper wire, for a price of course.
Re: FCC updates covered list to include foreign-made consumer routers
#13If we wanted secure products, we wouldn't ban devices. We'd mandate they open their firmware to audits.
problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free WiFi for customers?
Re: FCC updates covered list to include foreign-made consumer routers
#14And exactly how many consumer routers are not foreign made?
Re: FCC updates covered list to include foreign-made consumer routers
#15If we wanted secure products, we wouldn't ban devices. We'd mandate they open their firmware to audits.
problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free WiFi for customers?
> how do you prove the firmware in the flash chip matches source?
Trusted, qualified independent experts: Ala Underwriters Laboratories.
Re: FCC updates covered list to include foreign-made consumer routers
#16The FCC maintains a list of equipment and services (Covered List) that have been determined to “pose an unacceptable risk to the national security Recently, malicious state and non-state sponsored cyber attackers have increasingly leveraged the vulnerabilities in small and home office routers produced abroad to carry out direct attacks against American civilians in their homes. Vulnerabilities have nothing to do with…
That’s the ironic part.
Plenty of consumer-grade devices have had very lax security settings or backdoors baked in for purposes of “troubleshooting” and recovery assistance. It’s never been limited to foreign-made devices.
Security has never been part of the review process. The only time any agency has really cared is when encryption is involved, and that’s just been the FBI wanting it to be neutered so they can have their own backdoors.
Re: FCC updates covered list to include foreign-made consumer routers
#17> all consumer-grade routers produced in foreign countries Are there even consumer-grade routers that are produced in the USA...?
Are there any consumer-grade routers that aren't produced in Taiwan?
Re: FCC updates covered list to include foreign-made consumer routers
#18Re: FCC updates covered list to include foreign-made consumer routers
#19If you actually read the notice, it exempts models that have been approved. So this just seems to require approvals by DOH or DHS ,": Routers^ produced in a foreign country, except routers which have been granted a Conditional Approval by DoW or DHS." I take this to mean it is just adding security approvals for this type of thing to DOw and DHS. It is not a ban of all future models. It's just saying explicitly that instead of having to review models already in the market and determine that they should be removed because of nation state or other security concerns they are reviewing them before they go to market. Would be nice if people actually read it instead of hyperventilating.
Re: FCC updates covered list to include foreign-made consumer routers
#20If we wanted secure products, we wouldn't ban devices. We'd mandate they open their firmware to audits.
problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free WiFi for customers?
A trusted website that compiles it from source and a way for you to go to a webpage and flash from there automatically. The FPV community does that all the time with a set of websites for their ESC, flight controllers, radio, all open source. You can add signatures etc but just a trusted website goes a long way vs a random blob preinstalled