Live data from Hacker News

TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

ctrl.blog

121–130 of 245 posts

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#122

Earlier quoted context omitted.

> All in all your comment comes off as being jealous someone built something that provides a little income. I don’t consider the comment as a display of jealousy. It appears (to me) that it originates from a dislike of self-promotion. Note: I am not taking a position on the matter of self-promotion, but on the conclusion of jealousy.

I count single digit mentions in 1669 days that procotor is registered on HN. That would be lousy self promotion. I believe that proctor genuinely believes he built something useful and wants to share it. The snark in jlgaddis post rubs me the wrong way.

> I count single digit mentions in 1669 days that procotor is registered on HN. That would be lousy self promotion.

Lousy of not, it’s still self-promotion. This is true whether it occurs once or many times.

> I believe that proctor genuinely believes he built something useful and wants to share it.

I agree.

> The snark in jlgaddis post rubs me the wrong way.

Clearly. However, you aren’t defending your accusation of jealousy. Jealousy was the key word that I was addressing.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#123

Earlier quoted context omitted.

> All in all your comment comes off as being jealous someone built something that provides a little income. I don’t consider the comment as a display of jealousy. It appears (to me) that it originates from a dislike of self-promotion. Note: I am not taking a position on the matter of self-promotion, but on the conclusion of jealousy.

I count single digit mentions in 1669 days that procotor is registered on HN. That would be lousy self promotion. I believe that proctor genuinely believes he built something useful and wants to share it. The snark in jlgaddis post rubs me the wrong way.

> That would be lousy self promotion.

But still self-promotion if people want to be dogmatic about it. Some people, and some discussion forums, have an absolutely zero tolerance attitude to self-promotion.

I have no issue with it if:

* It isn't almost all that the account is for (caveat: personally I don't care enough in this case to have checked the account's comment history), i.e. the person contributes usefully to discussions noticably beyond what is needed for the self-promotion.

* The posts are at least relevant to the discussion at hand (which it appears to be here)

* The page/post/other is sufficiently honest about the affiliate links, because otherwise they could represent a conflict of interests (recommending what makes most out of affiliate relations rather than what is actually best by a good objective measure). This last part can be quite subjective, and again I've not looked at this particular case myself yet.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#124

Earlier quoted context omitted.

FWIW, it can be worth checking beyond whether or not your device is _supported_. I had DD-WRT running on an ASUS RT-AC68U for a while, and ended up switching back to a fork of the official firmware (Asuswrt-Merlin) for better performance once I upgraded to a >100Mbps WAN connection (IIRC it was something to do with hardware-accelerated NAT).

There's a patch to enable Qualcomm FastPath in LEDE, this offloads simpler TCP and UDP traffic from the Kernel stack and gets me 960Mbps LAN to WAN on a Netgear R7800.

I like it when you talk dirty like that...

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#125
post #108
post #93

Earlier quoted context omitted.

>> Don't bother with repeaters. Get normal access points, and install several of them if you need to disperse the range around a large area/building/complex. Or better yet, buy a bunch of Ubiqity UniFi's, which were specifically made for this purpose and should provide the most seamless and efficient way to blanket your house in Wifi (provided you already have cabling to the access points). They are not cheap, but al…

UniFi devices are a bit unusual as wireless APs: not only do they not act as a DHCP server, they require you to have one somewhere else on the network. Generally your uplink router will do this, but it surprised me when I wanted to use one as a standalone AP.

In my opinion that is correct behavior. An AP shouldn't have dhcp, it should provide access to a network.

Disclaimer: I have a unifi and edge router and it's a great combo

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#126

Honest question. How would you begin discovering this kind of leakage? Do you need some sorry of tap that records protocols and Mac addresses? Do these firmware emplacements have this as a built in feature. With so many IOT devices being plugged in seems like this would be handy

Lots of enterprise equipment have features where you can mirror traffic off an ethernet port and monitor it, but it is cheap and easy to do if you are poor too. Dig up a 100MB hub, not a switch, and then with another computer plugged into that hub run a program like Wireshark or tcpdump.

This is one reason why I don't run all-in-one router/wireless combos. Most integrated (especially provided by ISP units) devices have no way to tell you what is being sent over the air and then to your ISP.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#127

Earlier quoted context omitted.

Nice referral links on your page. I see from your comment history that you've spammed HN with it several times in the past as well. --- Edit: To be clear, there's nothing inherently wrong with affiliate links. To me, though, it's the same as someone here mentioning their product or service in a comment without disclosing their affiliation. It's one thing to tell another person "The FooBar 9000 is a good router.". It'…

What’s wrong with monetizing your stuff if you provide value? (Haven’t checked out the linked page, this is more like a generic question)

Nothing wrong with monetization, it's how you do it that's important.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#128

Honest question. How would you begin discovering this kind of leakage? Do you need some sorry of tap that records protocols and Mac addresses? Do these firmware emplacements have this as a built in feature. With so many IOT devices being plugged in seems like this would be handy

Use a decent router that allows packet sniffing. There are various low cost options. I use Mikrotik for example.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#129
post #9

PSA Anyone with commodity routers, repeaters, etc. please check out LEDE project https://lede-project.org . Check if your device has support here - https://lede-project.org/toh/start LEDE firmware is amazing. You will be able to do a lot more with your router and they have quick security fixes. The recent krack vulnerability was fixed within 2 days after the announcement.

Why LEDE over Merlin for ASUS?

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#130

  firmware sends six DNS requests and
  one NTP query every 5 seconds
  (...snip...)
  TP-Link has hardcoded the following non-configurable
  NTP servers and server pools in their firmware:
  (...snip...)
  au.pool.ntp.org, nz.pool.ntp.org
Wait... so TP-Link is effectively DDoSing NTP pool?

Also, as pointed out in another thread here, vendor using country prefix instead of applying for their own prefix is a violation of:

http://www.pool.ntp.org/en/vendors.html

..which was put in place as a reaction to incidents just like this one:

https://en.wikipedia.org/wiki/NTP_server_misuse_and_abuse#No...

Post reply on HN