2 ms·
For select small/home plastic routers, there's always OpenWrt. OpenWrt is generally more trustworthy than the stock firmware, but I wouldn't expect any of thes
by neilv 3y ago
For select small/home plastic routers, there's always OpenWrt.
OpenWrt is generally more trustworthy than the stock firmware, but I wouldn't expect any of these solutions to keep out a state actor, nor even a script kiddie with a lot of time on their hands. Trust level is more like not having a known stock firmware botnet motel, and maybe keeping some cruddy US IoT products on their own VLAN.
- greesil 3y agoBut... How do you know that's not back doored as well? I would just assume that everything is back doored or has a zero day until proven otherwise. And yes, how do you prove a negative? I refer you back to my first point.
- neilv 3y agoIt might well be backdoored. I said what I thought the trust level is.
- heavyset_go 3y agoIf a SoC has a co-processor with proprietary firmware, potentially for things like security, remote management, bringing up the main CPU, etc, peripherals with proprietary firmware, potentially with DMA access, or firmware operating at ring -2/-3, they can sidestep OpenWRT and you wouldn't even know it from the OpenWRT side of things.