3 ms·
Msn refetence, pfft https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6 https://www.wsj.com/politics/national-security/
by catlikesshrimp 1y ago
Msn refetence, pfft
https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6 https://www.wsj.com/politics/national-security/us-ban-china-...
https://www.cbsnews.com/news/tp-link-router-china-us-ban/#site-header78 https://www.cbsnews.com/news/tp-link-router-china-us-ban/#si...
>>The router-manufacturer TP-Link, established in China, has roughly 65% of the U.S. market for routers for homes and small businesses
Ban TP-link and tens or hundreds of chinese disposable brands will sell OEM TPlink routers, with even worse security.
Solution: all hardware IOT companies are responsible for any vulnerability discovered. ISPs are fined according to the number of vulnerable devices they connect. Watch responsible brands trying to cannibalize each other (discovering vulnerabilities) and ISPs actually caring about enforcing.
By "responsible" I mean recalls and replacements. Financial and penal responsibility.
IOTs will cost their actual price, without being financed by adversarial agents and bad manufacturing practices.
- catgirlinspace 1y ago> ISPs are fined according to the number of vulnerable devices they connect. That sounds like how we get ISPs only allowing ISP-provided routers and only devices from a few big manufacturers can connect. And things like phones running LineageOS not being able to connect.
- catlikesshrimp 1y agoI was thinking new devices having to pass tests in the spirit of the electromagnetic interference tests for certification. Except models having to pass the tests yearly / quarterly / any time period. Such expenses would be covered by the manufacturer during the official life of the device offered by the manufacturer. I understand your point. What you describe is happening in Australia. Hopefully any law targetting botnets and any other in the future has a clause forbidding this behavior of banning provider not approved devices when they are technically compatible.