4 ms·
> OpenWRT is pretty great at offering features and security for consumer devices That's a misconception. Nobody actually cares about security for packages that
by patrakov 2y ago
> OpenWRT is pretty great at offering features and security for consumer devices
That's a misconception. Nobody actually cares about security for packages that are not in the default install. For example, the initscript for sstp-client disables certificate validation unconditionally, see https://github.com/openwrt/packages/issues/25212 https://github.com/openwrt/packages/issues/25212
- choobacker 2y agoGood job on raising that issue. TIL SSTP. > Nobody actually cares about security for packages that are not in the default install. Probably an exaggeration, but it's clear there are some packages that are insecure out-the-box.
- TheDong 2y agoIt at least offers more security than the usual alternative on a consumer router of the manufacturer's OS (i.e. something updated once a decade running linux 2.6 with GPL-violating unreleased patches so you can't update it yourself, all written in C by the contractor that bid the lowest).
- FeistySkink 2y agoIf others think this is in jest, there are recent TP-Link routers with 2.6 kernel and Broadcom.