3 ms·

True, but if source code is available and is open, presumably you could configure it send the finger print to any place you want, right?

dogma1138 11y ago
It is but it seems that all of the security features of their software rely on their "Distributed Adaptive Firewall" which can collect data and push automatic updates to the router, they also can remotely modify the rule set of the FW which runs on the router trough those updates (works like a signature update for any AV or IPS/IDS appliance) Neither in their site nor in what documentation they have does it appear to say how can you disable data collection and or updates so it seems that to get the designed functionality of this router you have to use their software which collects data and allows them some level of remote access that can manipulate the configuration of the device. Now I'm not saying that they have any nefarious intentions this isn't any different than a signature update for your AV, or system updates but it just doesn't sound like it's the best approach for a device that is supposed to be an "open" platform which operates like entry-level enterprise grade edge network appliances. Automatic updates and collection should be on an explicit opt-in premise and not implicitly enabled on all devices, I understand that they need to collect traffic in order to identify new attacks but as far as threats to SOHO/SMB/SME users go that might use their software and are unlikely to be targeted by an overly sophisticated attack (which most likely will not be detected in the first place) running even a small scale traffic collection operation using local chapters of organizations like OWASP and IEEE, academic institutions and willing participants should be more than sufficient.
- ZenoArrow 11y ago
  > "Neither in their site nor in what documentation they have does it appear to say how can you disable data collection" From the homepage... "the user is required to commit to using the Turris router as the main internet gateway for his network for a specified period of time, and not to intervene in collection of data." Doesn't look like they will give you the option to disable data collection.
  - oselhn 11y ago
    Thats the main feature. Router is designed by non profit organization https://www.nic.cz/ https://www.nic.cz/ for collecting research data.

dogma1138 11y ago

It is but it seems that all of the security features of their software rely on their "Distributed Adaptive Firewall" which can collect data and push automatic updates to the router, they also can remotely modify the rule set of the FW which runs on the router trough those updates (works like a signature update for any AV or IPS/IDS appliance) Neither in their site nor in what documentation they have does it appear to say how can you disable data collection and or updates so it seems that to get the designed functionality of this router you have to use their software which collects data and allows them some level of remote access that can manipulate the configuration of the device. Now I'm not saying that they have any nefarious intentions this isn't any different than a signature update for your AV, or system updates but it just doesn't sound like it's the best approach for a device that is supposed to be an "open" platform which operates like entry-level enterprise grade edge network appliances. Automatic updates and collection should be on an explicit opt-in premise and not implicitly enabled on all devices, I understand that they need to collect traffic in order to identify new attacks but as far as threats to SOHO/SMB/SME users go that might use their software and are unlikely to be targeted by an overly sophisticated attack (which most likely will not be detected in the first place) running even a small scale traffic collection operation using local chapters of organizations like OWASP and IEEE, academic institutions and willing participants should be more than sufficient.

ZenoArrow 11y ago
> "Neither in their site nor in what documentation they have does it appear to say how can you disable data collection" From the homepage... "the user is required to commit to using the Turris router as the main internet gateway for his network for a specified period of time, and not to intervene in collection of data." Doesn't look like they will give you the option to disable data collection.
- oselhn 11y ago
  Thats the main feature. Router is designed by non profit organization https://www.nic.cz/ https://www.nic.cz/ for collecting research data.