Live data from Hacker News

FCC updates covered list to include foreign-made consumer routers

fcc.gov

21–30 of 452 posts

Re: FCC updates covered list to include foreign-made consumer routers

#22

Will this impact the Mono Gateway[0]? [0] https://mono.si/

It looks like it probably won't matter. The site says you can preorder a DevKit "Shipping between June and September 2025."

The fact that they haven't updated that webpage with new information since October 1st 2025 seems to indicate bad news...

Re: FCC updates covered list to include foreign-made consumer routers

#23
This part of the press release seems pretty crucial:

> Producers of consumer-grade routers that receive Conditional Approval from DoW or DHS can continue to receive FCC equipment authorizations.

In other words, foreign-made consumer routers are banned by default. But if you are a manufacturer, you can apply to get unbanned ("Conditional Approval").

In the FAQ (https://www.fcc.gov/faqs-recent-updates-fcc-covered-list-reg...), they even include guidance on how to apply: https://www.fcc.gov/sites/default/files/Guidance-for-Conditi...

If you (a manufacturer) apply, they want information regarding corporate location, jursidiction, and ownership. They want a bill of materials with country of origin and a justification for why any foreign-sourced components can't be domestic. They want information about who provides software and updates. And they want to hear your plan to increase US domestic manufacturing and progress toward that goal.

So, foreign-made consumer routers can still be sold, but they are going to look at them with a fine-tooth comb, and they are going to use FCC approval as leverage to try to increase domestic manufacturing.

Re: FCC updates covered list to include foreign-made consumer routers

#24
Does the router ban really only pertain to consumer-grade networking devices?

> For the purpose of this determination, the term “Routers” is defined by National Institute of Science and Technology’s Internal Report 8425A to include consumer-grade networking devices that are primarily intended for residential use and can be installed by the customer. Routers forward data packets, most commonly Internet Protocol (IP) packets, between networked systems. ¹

> A “consumer-grade router” is a router intended for residential use and can be installed by the customer. Routers forward data packets, most commonly Internet Protocol (IP) packets, between networked systems. Throughout this document, the term “router” is used as a shorthand for “consumer-grade router.” ²

There doesn't seem to be a general ban for foreign-made professional routers, just for some Chinese manufacturers, right³?

Oh, and what does "produced by foreign countries" even mean? I couldn't find any definition. Is this meant to be the country of final assembly? Would importing a Chinese router and the flashing the firmware in the USA be sufficient to be exempt? Where is the line drawn usually?

¹) https://www.fcc.gov/sites/default/files/NSD-Routers0326.pdf

²) https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8425A.pdf

³) https://www.fcc.gov/supplychain/coveredlist

Re: FCC updates covered list to include foreign-made consumer routers

#25

If we wanted secure products, we wouldn't ban devices. We'd mandate they open their firmware to audits.

It'd be great if open firmware could be commercially viable. Finding a business model is hard.

The OpenWRT One [1] sponsored by the Software Conservancy [2] and manufactured by Banana Pi [3] works lovely.

[1] https://openwrt.org/toh/openwrt/one

[2] https://sfconservancy.org/activities/openwrt-one.html

[3] https://docs.banana-pi.org/en/OpenWRT-One/BananaPi_OpenWRT-O...

Re: FCC updates covered list to include foreign-made consumer routers

#26
post #20

Earlier quoted context omitted.

problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free WiFi for customers?

A trusted website that compiles it from source and a way for you to go to a webpage and flash from there automatically. The FPV community does that all the time with a set of websites for their ESC, flight controllers, radio, all open source. You can add signatures etc but just a trusted website goes a long way vs a random blob preinstalled

That proves that the one they checked, had the correct firmware. It does not prove that the one from the next batch that you bought did. We are all technical people here we and understand that there isn’t really an easy way to do this that a random non-technical person could actually understand and use.

Re: FCC updates covered list to include foreign-made consumer routers

#27

Earlier quoted context omitted.

problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free WiFi for customers?

> how do you prove the firmware in the flash chip matches source? Trusted, qualified independent experts: Ala Underwriters Laboratories.

One word for you: dieselgate

https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal

Re: FCC updates covered list to include foreign-made consumer routers

#29

Will this impact the Mono Gateway[0]? [0] https://mono.si/

It's hard to tell considering there is absolutely no company/ownership information on the site, but a .si (Slovenia) domain coupled with EUR being an accepted currency has me thinking they're Europe-based, and therefore foreign-made.

... at the same time, I don't think I'd send $100 to a site with no contact/ownership/company info to begin with.

Re: FCC updates covered list to include foreign-made consumer routers

#30
post #19

If you actually read the notice, it exempts models that have been approved. So this just seems to require approvals by DOH or DHS ,": Routers^ produced in a foreign country, except routers which have been granted a Conditional Approval by DoW or DHS." I take this to mean it is just adding security approvals for this type of thing to DOw and DHS. It is not a ban of all future models. It's just saying explicitly that i…

Why shouldn’t people have a reaction to a policy that mandates a new approval process on a large class of consumer products?
Post reply on HN