3 ms·

For non-technical people, or people who just don't know much about this kind of thing, I would suggest just reviewing what the latest firmware version is, and u

by ac29 8y ago

For non-technical people, or people who just don't know much about this kind of thing, I would suggest just reviewing what the latest firmware version is, and updating if there are new versions. Also, review release history, if available. If your router is getting less than 2 or 3 updates a year, assume there are unfixed bugs or security issues. For this specific issue? It only affects Mikrotik routers, and the vulnerability has been patched. So if you aren't using Mikrotik, or if you are and have the latest firmware, you're good.

pathseeker 8y ago
>For non-technical people, or people who just don't know much about this kind of thing, I would suggest just reviewing what the latest firmware version is, and updating if there are new versions. I think you vastly overestimate how much technical knowledge non-technical people have. A huge swath of non-technical people that use computers won't even know which component the router is, let alone know how to log into the UI and check the firmware.
- ryanmarsh 8y ago
  This is sadly true. When it comes to computer security most of humanity is incredibly vulnerable. It's all so confusing for them. Sometimes the URL bar in their browser is a URL, sometimes it's the search phrase they typed and there's no URL. Many can't tell you the difference (still in 2018 this blows my mind) the difference between their web browser and the internet. I actually had a discussion with someone yesterday where they told me they didn't download a document they just previewed it... FROM THEIR DOWNLOADS FOLDER. They thought quick viewing the doc in their OS's preview function was not the same as full blown opening it an app which was akin to "downloading it". I had to explain that the bits were in fact on their computer, downloaded. It's easy for us to point the finger and say people need to invest in their own personal understanding of this stuff. To some extent I agree but I also want my CPA to spend his free time learning more about the tax code and my finances, not patching his router. Overall computer security needs a reset. For all the complaints of "walled gardens" and "lock in" etc... most folks' iPhone is the closest they'll ever get to a secure computer. That's a shame.

by ac29 8y ago

pathseeker 8y ago

>For non-technical people, or people who just don't know much about this kind of thing, I would suggest just reviewing what the latest firmware version is, and updating if there are new versions. I think you vastly overestimate how much technical knowledge non-technical people have. A huge swath of non-technical people that use computers won't even know which component the router is, let alone know how to log into the UI and check the firmware.

ryanmarsh 8y ago
This is sadly true. When it comes to computer security most of humanity is incredibly vulnerable. It's all so confusing for them. Sometimes the URL bar in their browser is a URL, sometimes it's the search phrase they typed and there's no URL. Many can't tell you the difference (still in 2018 this blows my mind) the difference between their web browser and the internet. I actually had a discussion with someone yesterday where they told me they didn't download a document they just previewed it... FROM THEIR DOWNLOADS FOLDER. They thought quick viewing the doc in their OS's preview function was not the same as full blown opening it an app which was akin to "downloading it". I had to explain that the bits were in fact on their computer, downloaded. It's easy for us to point the finger and say people need to invest in their own personal understanding of this stuff. To some extent I agree but I also want my CPA to spend his free time learning more about the tax code and my finances, not patching his router. Overall computer security needs a reset. For all the complaints of "walled gardens" and "lock in" etc... most folks' iPhone is the closest they'll ever get to a secure computer. That's a shame.