Live data from Hacker News

TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

ctrl.blog

161–170 of 245 posts

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#161

Honest question. How would you begin discovering this kind of leakage? Do you need some sorry of tap that records protocols and Mac addresses? Do these firmware emplacements have this as a built in feature. With so many IOT devices being plugged in seems like this would be handy

You get a good non-consumer grade router with network sniffing, per-device bandwidth and connection history, and other nice features like that.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#163
post #78
post #43

Earlier quoted context omitted.

Just install https://lede-project.org firmware, the successor of OpenWRT.

It's not so clear cut. You need to benchmark before and after. Often acceleration modules on Broadcom, Qualcomm, Mediatek etc are proprietary and without acceleration in OpenWrt/Lede the router is going to be dog slow. The wifi modules are also proprietary and need be well supported by Openwrt/Lede or you will see throughput drops. Of late it's just best to use what's in the router and not bother. And we move to fast…

> Of late it's just best to use what's in the router and not bother.

Depends on what your priorities are - high performance or high security.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#164
post #4

My most recent frustration with TP-LINK was they they DO NOT provide their firmware updates over HTTPS. They do not provide checksums for their firmware files either. (When I asked for these things, their support weren't helpful on Twitter.) So you're expected to download some unsigned binary over an untrusted connection and trust that with all your traffic. Definitely not buying TP-LINK next time. Good to know this…

Did you see this one too? https://www.ctrl.blog/entry/tplink-firmware-outdated-downloa...

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#165
post #149

Earlier quoted context omitted.

There's a patch to enable Qualcomm FastPath in LEDE, this offloads simpler TCP and UDP traffic from the Kernel stack and gets me 960Mbps LAN to WAN on a Netgear R7800.

Where can I find this patch? I'm on one of the ASUS routers but want to try out LEDE, but don't want reduced throughput.

I think these are it:

https://forum.lede-project.org/t/qualcomm-fast-path-for-lede...

https://github.com/gwlim/Fast-Path-LEDE-OpenWRT

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#166

Earlier quoted context omitted.

> The site openly disclosed that they use affiliate links to amazon. Did it? I was on an iPad and only realized they were affiliate links after I clicked on one and it took to Amazon. Immediately, I looked at the URL to see if there was a referral tag in there. I then went back and noticed "DISCLOSURE" at the very bottom, in the footer, but I don't recall seeing any mention of it before that. > If you think that all…

> Did it? It says first thing on the top that links go to amazon. There's a link at the bottom to the full discussion. What's the issue if the links to amazon are affiliate links? It's not like they're forcing you to buy or that the value you get from the site is reduced by that. They don't hype a specific device either. > Did I say anything even remotely close to that? I very much understood your complaint about "sp…

It talks a lot about Amazon, but there's no mention of using affiliate links.

The issue is that there's a conflict of interest when a page that gives you advice on what to buy uses affiliate links. If they get a cut of my purchase, then they're incentivized to get me to buy the most expensive alternative rather than the best one, and to buy something rather than stick with what I have if what I have is adequate.

This is not an insurmountable problem, but disclosure is important so I know what's going on.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#167
post #8

Wow! 11 years ago Dlink were the ones abusing NTP https://m.slashdot.org/story/67096 Strange how these "mistakes" keep cropping up. Is it laziness, malice, or just ignorance?

Perhaps it's the same developers making the same stupid mistakes.

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#168

Earlier quoted context omitted.

FWIW, it can be worth checking beyond whether or not your device is _supported_. I had DD-WRT running on an ASUS RT-AC68U for a while, and ended up switching back to a fork of the official firmware (Asuswrt-Merlin) for better performance once I upgraded to a >100Mbps WAN connection (IIRC it was something to do with hardware-accelerated NAT).

There's a patch to enable Qualcomm FastPath in LEDE, this offloads simpler TCP and UDP traffic from the Kernel stack and gets me 960Mbps LAN to WAN on a Netgear R7800.

Thanks for the tip; I'll have to check this out! My router's OpenWRT wiki page has had an ominous warning about reduced NAT throughput for some time. Turns out that my router should be supported (Atheros AR9344 MIPS 74Kc based).

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#169
post #17

Well I run a TP-link repeater and now thinking of getting something better. Someone know any routers or repeaters with reputation for good firmware?

The Ubiquity Unifi stuff looks good and not very expensive.

Speaking from experience, Unifi is rock solid. I've got 2 Unifi access points and a gigabit PoE switch in my house.

Troy Hunt also had a great article detailing his work with Unifi gear as well: https://www.troyhunt.com/ubiquiti-all-the-things-how-i-final...

Re: TP-Link firmware sends six DNS requests and one NTP query every 5 seconds

#170
post #62
post #24

Earlier quoted context omitted.

Speaking from experience, it is good. Takes a bit of networking know-how to set it up though, and you still need a router. Their consumer oriented stuff like the AmpliFi is quite excellent too and a bit friendlier. I use an Edgerouter Lite, a Mikrotik switch and UniFi APs for myself and was so pleased I bought the AmpliFi mesh for my parents.

I have a similar setup, without the switch and the Unifi APs are just excellent. Smooth setup, great range. So, if you can run a cable, I second Unifi. Op, if you can not run a cable, maybe look into a mesh network. Repeaters "loose" about half of the bandwidth anyway, a mesh might be good alternative. If you want to set up an open source enviroment, there is libremesh ( http://libremesh.org ). If you just want to bu…

Ubiquiti also has a line of Unifi mesh gear: https://unifi-mesh.ubnt.com/
Post reply on HN