Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenWrt Two Approval

openwrt.org

Post reply on HN
Print view View original

61–70 of 133 posts

Re: OpenWrt Two Approval

#61

Post by facile3232 »

sgjohnson wrote: post #46
microtonal wrote: post #42

Earlier quoted context omitted.

Ubiquiti gear is great, but does not use open source software like OpenWrt Two. And I think most modern Ubiquiti routers are not supported by OpenWrt.

I don’t see how ubiquiti not being open source is relevant here, as the original question was > Can you recommend Western companies that would be able to produce similar hardware at the same price point? Besides, I’m yet to see any open source routing software that’s half usable as a complete package. With the sole exception of VyOS, it’s all hot garbage, OpenWRT and pfSense included.

Oh that's surprising! Why do you consider VyOS to be less "hot garbage" than the others? That's a hell of a take!

Re: OpenWrt Two Approval

#62

Post by CartwheelLinux »

calcifer wrote: post #56
donnachangstein wrote: post #45

Earlier quoted context omitted.

> How reasonable do you think it is to be this automatically suspicious of any computer coming from China? Based on their track record? Pretty fucking reasonable. I would say that most probably isn't malicious collaboration with the CCP, rather sheer incompetence. Shipping secure anything just isn't part of their culture. Read a comment on HN the other day from someone that evaluated Huawei hardware for a telco and s…

> I would say that most probably isn't malicious collaboration with the CCP, rather sheer incompetence. As opposed to the US, where it's the other way around [1]. You prefer that ? [1] https://en.wikipedia.org/wiki/Room_641A

Not only this, but most US companies do not really have any incentive to focus on security.

On HN there is an echo chamber with the shunning of companies who have experienced incompetence based breaches. Your average consumer does not know (beyond the news cycle) or generally even really care.

I think you can even look at FBI and NSA public service announcements and guides about consumer electronics security as a sort of ''shit this industry stuff is pretty bad we need to think about our goal differently,'' with regards to them trying to pick up some of the security slack that US companies shit out with their products.

Re: OpenWrt Two Approval

#63

Post by ElectRabbit »

unethical_ban wrote: post #32
donnachangstein wrote: post #21

Earlier quoted context omitted.

Is it really any different than every person who insists on running pfSense for security reasons then immediately suggesting some Chinese shitbox PC off AliExpress as the ideal platform to run it on? Also, since when has having a Wikipedia page proven a company legitimate? You know most companies author their own pages anyway, that's kind of how Wikipedia works.

As opposed to the people who run insecure software on questionable hardware? Is everyone supposed to buy Checkpoint?

By looking at the security history of Checkpoint.. uhm.. :-)

Re: OpenWrt Two Approval

#64

Post by ElectRabbit »

microtonal wrote: post #41
miohtama wrote: post #27

Earlier quoted context omitted.

Can you recommend Western companies that would be able to produce similar hardware at the same price point?

MicroTik is European (Latvian) and makes some affordable routers. Their own RouterOS is closed source, but many models are supported by OpenWrt (no experience). If you are willing to spend more, OPNsense (Netherlands) also sells hardware. In the old days one could also recommend PFsense hardware, but they are becoming more and more closed (though you can usually run OPNsense on the same hardware). QNAP is Taiwanese.…

I really love their Switches, Routers and directional radio link stuff.

But: Mikrotik has problems with end-user Wifi - Their APs are old and weak.

Re: OpenWrt Two Approval

#65

Post by ElectRabbit »

microtonal wrote: post #42
sgjohnson wrote: post #40

Earlier quoted context omitted.

https://store.ui.com/us/en/category/all-cloud-gateways/produ... 4x 2.5GbE (one of them even a PoE port) 1x 10GbE SFP+ WiFi 7 with MLO $279

Ubiquiti gear is great, but does not use open source software like OpenWrt Two. And I think most modern Ubiquiti routers are not supported by OpenWrt.

Quite a few Ubiquiti APs can be reflashed with OpenWRT.

Re: OpenWrt Two Approval

#66

Post by _cenw »

the-grump wrote: post #10

Heck yeah. GL.iNet is awesome, and these specs will make this the one router to rule them all for consumer applications. It’s a wonderful time to be into free software and free hardware. Thank you folks!

I have one of their travel routers (Beryl), and they beat a U7 Pro (the one with horrible still unfixed firmware) in consistency and throughput with one device connected to 5 GHz. While I sit next to the UniFi AP and the Beryl sits behind a concrete wall. And it's not a small difference either. I run it in AP mode for game streaming now because the UniFi keeps dying, even when I'm the only device on 6 GHz.

The polish I'm missing on supposed premium products.

Re: OpenWrt Two Approval

#67

Post by Propelloni »

donnachangstein wrote: post #25
userbinator wrote: post #24

Earlier quoted context omitted.

Good luck finding hardware that isn't at least partly or completely made in China.

Mikrotik gets an honorable mention here. At least part or all of their product line is still manufactured in Latvia.

It's a part. Mikrotik says it is manufacturing in Latvia, Lithuania, Malaysia, Vietnam, and China.

Re: OpenWrt Two Approval

#68

Post by coderatlarge »

wtallis wrote: post #48
donnachangstein wrote: post #45

Earlier quoted context omitted.

> How reasonable do you think it is to be this automatically suspicious of any computer coming from China? Based on their track record? Pretty fucking reasonable. I would say that most probably isn't malicious collaboration with the CCP, rather sheer incompetence. Shipping secure anything just isn't part of their culture. Read a comment on HN the other day from someone that evaluated Huawei hardware for a telco and s…

What kind of security vulnerabilities do you think an incompetent PC OEM is going to accidentally introduce to a barebones PC that's basically shipping an Intel reference platform and no SSD ? Or that GL.iNet might be able to introduce to a system where OpenWRT is assembling the firmware image that gets flashed to the board, and if there are any closed-source components they'd be coming from Mediatek and not develope…

I’ve reluctantly come to the view that Apple is the best bet for a consumer to get a somewhat reasonable (price notwithstanding) compromise between hardware vertical integration and software that offers substantial bug bounties and large market incentives to not allow bad vulnerabilities to sit for too long. With deep enough pockets to hang tough if needed in various situations.

Re: OpenWrt Two Approval

#69

Post by greggsy »

microtonal wrote: post #41
miohtama wrote: post #27

Earlier quoted context omitted.

Can you recommend Western companies that would be able to produce similar hardware at the same price point?

MicroTik is European (Latvian) and makes some affordable routers. Their own RouterOS is closed source, but many models are supported by OpenWrt (no experience). If you are willing to spend more, OPNsense (Netherlands) also sells hardware. In the old days one could also recommend PFsense hardware, but they are becoming more and more closed (though you can usually run OPNsense on the same hardware). QNAP is Taiwanese.…

Mikrotik devices compete in the mid-tier commercial and prosumer markets (the same market Unifi compete in).

GL.Inet are firmly in the personal and budget enthusiast market.

The price differences between those two markets is almost 2:1.

Re: OpenWrt Two Approval

#70

Post by phantomathkg »

neilv wrote: post #11

GL.iNet is a popular brand, though I can't find a Wikipedia page for it. https://www.gl-inet.com/about-us/ says: > GL Tech (HK) Ltd: #601, 5W, Hong Kong Science Park, N.T. Hong Kong > GL Intelligence, Inc.: 10400 Eaton Place, Suite 215, Fairfax, VA 22030 I'm a little curious about this. One of the reasons that some people run OpenWrt is for improved security. In the general security space, a Shenzen company isn't the…

The address you mentioned is Hong Kong not ShenZhen.
Post reply on HN