5 ms·
> As for MikroTik, the Latvian company has been one of the most responsive vendors in terms of security flaws, fixing issues within hours or days, compared to t
by deckar01 8y ago
> As for MikroTik, the Latvian company has been one of the most responsive vendors in terms of security flaws, fixing issues within hours or days, compared to the months that some other router vendors tend to take. It would be unfair to blame this situation on them. Patches have been available for months, but, yet again, it is ISPs and home users who are failing to take advantage of them.
A system that requires users to opt in to security is not a secure system.
- NelsonMinar 8y agoOTOH people would scream bloody murder at a router that installed firmware updates and rebooted itself without asking. Just look at the reaction to how Windows 10 handles updates.
- Avamander 8y agoIt's time MT got something like unattended upgrades.
- isostatic 8y agoIt's trivial to script on a mikrotik. Arguably it should be in the default config - most people who know what they're doing will start with a blank slate anyway (system reset configuration nodefaults)
- deckar01 8y agoOne PC operating system's poor implementation of automatic updates does not mean automatic updates can't be implemented gracefully on a router.
- jessaustin 8y agoIt takes effort to purchase, install, and configure MikroTik products rather than just using the router/AP combo you got from your ISP. Anyone who has done that is capable of patching occasionally. [EDIT:] And actually now that I've read TFA I learn that many of these are actually "edge" routers used by ISPs on their own premises. There's no excuse for an ISP not to keep up with patches.
- deckar01 8y agoThey have hardware targeted towards average consumers also. https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6MH2773 https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6MH2... https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6D86219 https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6D86...
- sathackr 8y agoAs opposed to Microsoft ramming updates down your throat whether you like them or not, and whether they break things or not? The lock on your house door is 'opt-in'. If you don't lock it and someone steals something, is it the lock manufacturer's fault? The home builder's fault? Did they construct an insecure house? Ignorance of the proper operation of the lock is not an excuse not to lock it and doesn't shift the responsibility to someone else. I don't know why people happily assume everything in IT is secure by default when in the real world, almost nothing is secure by default.
- deckar01 8y agoThe pervasiveness of insecure systems is not a justification for designing an insecure system.
- sathackr 8y agoIndeed. Quite the opposite. When working with multiple layers of systems that will eventually have vulnerabilities discovering, you must design your environment to remain secure regardless. The chances of someone infiltrating a properly designed(and maintained) environment without detection are very slim. Defense in depth.