5 ms·
I find the second part of that statement more interesting: > If it is (and we learn about it), a crypto fix will go out immediately via network-wide firmware u
by pfundstein 6y ago
I find the second part of that statement more interesting:
> If it is (and we learn about it), a crypto fix will go out immediately via network-wide firmware update.
This implies that the SpaceX holds private keys for signing firmware updates, and a mechanism for pushing them.
I hope those keys are kept very far from anything Internet-connected.
- mlindner 6y agoI mean even if you own your own private modem, Comcast (and others) can and do push new firmware directly into your modem. I don't see how this would be any different.
- pfundstein 6y agoI'm not sure how you think those ISPs supposedly push firmware to private 'modems' of all shapes and sizes, but I would like to know because I had a hell of a time reflashing my router with OpenWRT.
- jpollock 6y agoIt's because cable modems are standardized with a set of upstream management protocols. They have a looong history of fleet management [1]. If you have cable internet, try going to 192.168.100.1. [2] [1] https://en.wikipedia.org/wiki/DOCSIS https://en.wikipedia.org/wiki/DOCSIS [2] https://www.computerworld.com/article/2880475/talk-to-your-modem.html#:~:text=Most%20modems%20in%20their%20list,10.1%20or%20192.168 https://www.computerworld.com/article/2880475/talk-to-your-m....
- pfundstein 6y agoYou're referring to the CPE which is owned and managed by the ISP just as they own and manage other routers in their network. The other person said that they can push firmware to private modems though, which is not possible without that modem being configured to accept such pushes. Perhaps you're thinking of CWMP (TR-069) which is a protocol that ISPs often use to push configs to modems configured to receive them, but again, it cannot be used to arbitrarily flash the firmware of private modems.
- jpollock 6y agoMotorola's documentation says that firmware updates to _my_ modem are pushed by the ISP, with the rollout managed by the ISP. It may be CPE, but I purchased it retail and it is not linked to any particular ISP. https://motorolamentor.zendesk.com/hc/en-us/articles/216091737-How-do-I-update-the-modem-firmware-#:~:text=All%20firmware%20updates%20are%20handled,update%20cable%20modem%20firmware%20manually https://motorolamentor.zendesk.com/hc/en-us/articles/2160917....