Grab a decent microtik router and a few Ubiquiti Unifi AP's, setup automatic updates, and never touch them again.
why not Ubiquity edgerouter? I use the ERX, so curious what makes microtik better?
Fixing Weak Wi-Fi Router Security
31–40 of 69 posts
Re: Fixing Weak Wi-Fi Router Security
#32Grab a decent microtik router and a few Ubiquiti Unifi AP's, setup automatic updates, and never touch them again.
So... two of the routers affected by the recent VPNFilter malware? Interesting choice.
Re: Fixing Weak Wi-Fi Router Security
#33This should be renamed to "Fixing router security". Nothing in the article is actually specific to Wi-Fi. They don't even mention disabling WPS which is the #1 vulnerability in consumer-grade Wi-Fi networks.
Re: Fixing Weak Wi-Fi Router Security
#34The article concludes that you should spend $200 on Eero or Google WiFi. Is this an advertisement? Also note that $200 in “value” is mostly covering the massive marketing budget of Eero and Google. You do not need to pay $200 for a secure WiFi solution.
Possibly. The NYT bought The Wirecutter, which did (pretty good) reviews of "best in class" products and then made money from the Amazon affiliate commissions. https://www.recode.net/2016/10/24/13381002/new-york-times-wi... I'd still say the point stands that 99% of the routers out there have awful security and it's just a matter of time (often months) because your router is overtaken by a botnet, especially if you d…
Is there any reason to believe Wirecutter or NYT has compromised the integrity of their reviews? That seems an unfair allegation to throw around absent any evidence beyond it possibly being in their financial interest.
Re: Fixing Weak Wi-Fi Router Security
#35> Replace your router every few years How about instead of this, use open source software on your router? It will keep being updated, and with the manufacturer's proprietary software on the device you can't really trust it anyway.
That's a good solution for geeks, not so much for everyone else. Regular people don't even update their routers, much less flash 3rd party software on them. I don't think most people even know updating your router is even a possibility. I use Google Wifi and it updates itself. In the future I might put in a PFSense, but wifi solutions like Google Wifi/Eero/etc are the way to go if you're not a computer person.
That may be behind the Eero move to go subscription only. Could be good if implemented properly but much more expensive that just buying a high end router.
Re: Fixing Weak Wi-Fi Router Security
#36Grab a decent microtik router and a few Ubiquiti Unifi AP's, setup automatic updates, and never touch them again.
What do you recommend router-wise? I'm currently using an EdgeRouter PoE and have been happy with it, but I'm setting up a home network at a condo and am researching options.
It's hard to beat a $50 craigslist dual+ core box, a second nic and pfSense.
I have a dell optiplex 780. I paid $15 for a second nic. It's great.
Re: Fixing Weak Wi-Fi Router Security
#37Earlier quoted context omitted.
What do you recommend router-wise? I'm currently using an EdgeRouter PoE and have been happy with it, but I'm setting up a home network at a condo and am researching options.
It's hard to beat a $50 craigslist dual+ core box, a second nic and pfSense. I have a dell optiplex 780. I paid $15 for a second nic. It's great.
> It's hard to beat a $50 craigslist dual+ core box, a second nic and pfSense
unless you pay for your own power. An edge router lite uses How much does it cost to run the pfsense box over the course of 2 years?
Re: Fixing Weak Wi-Fi Router Security
#38Grab a decent microtik router and a few Ubiquiti Unifi AP's, setup automatic updates, and never touch them again.
So... two of the routers affected by the recent VPNFilter malware? Interesting choice.
The vulnerability exploited by VPNFilter was apparently patched by Mikrotik in March 2017.
Re: Fixing Weak Wi-Fi Router Security
#39Earlier quoted context omitted.
For 100 MBit/s firewall all you need is Raspberry PI. Most people’s WAN connection is probably less than that. And if you need gigabit then there’s still plenty of options, anything from ODROID-C to 10W Goldmont, the latter a little expensive but it can double as HTPC etc. Idk how any of those work with BSDs but they work fine on Linux. Also the nic.cz people have a neat new product[1]. It’s really cool, but I think…
Last I checked pfsense wasn't running on ARM. And there were worries that it wouldn't even be able to keep up unless you were very careful with your filters, although that might be less of a problem with the more recent hardware.
the SG-1000 that pfsense sells is listed as ARM: https://www.netgate.com/solutions/pfsense/sg-1000.html
Re: Fixing Weak Wi-Fi Router Security
#40Grab a decent microtik router and a few Ubiquiti Unifi AP's, setup automatic updates, and never touch them again.
why not Ubiquity edgerouter? I use the ERX, so curious what makes microtik better?
I just haven't used them before, judging from the quality of my AP's they should work just fine.
I don't know how flexible they are though, RouterOS might be a bit of a pig to use but it can do pretty much anything you want, the Ubiquiti gear is very user friendly and that usually means less flexible.