6 ms·

Given the recent NSA revelations, and the various posts discussing software and hardware backdoors, this vulnerability sent me into full-blown paranoia mode. Y

by mikevm 13y ago

Given the recent NSA revelations, and the various posts discussing software and hardware backdoors, this vulnerability sent me into full-blown paranoia mode. You can't trust web service providers, you can't trust your ISP, you can't trust your gov't, you can't trust hardware providers. Jesus H. Christ, is there anything left to trust? I'm starting to feel that by the simple act of connecting a device to the Internet I'm already compromised which makes me feel dirty. I guess Richard Stallman isn't so crazy after all for demanding open source hardware (well, he's actually demanding 'free' hardware). I know that DD-WRT is an open source router firmware, but I'm not sure whether high-end routers support it.

anon1385 13y ago
>You can't trust web service providers, you can't trust your ISP, you can't trust your gov't, you can't trust hardware providers. You forgot your compilers: http://cm.bell-labs.com/who/ken/trust.html http://cm.bell-labs.com/who/ken/trust.html
deleted 13y ago
[deleted]
lwhalen 13y ago
I've got TomatoUSB on my Asus router. EXCEPTIONALLY powerful and stable firmware with great wireless coverage. This past weekend, pardon my humblebrag, I was able to segregate my network into separate VLANs for the home LAN, guest wireless, and a DMZ for my servers, with appropriate access ACLs (via iptables) for each. I feel very secure with this firmware, far moreso than with the Asus stock one that's for sure!
- bestham 13y ago
  Thinking about doing something similar, would you care to do a writeup? I'm deeply scared of iptables.
- MrSouth 13y ago
  I'd recommend http://tomato.groov.pl/ http://tomato.groov.pl/ running it on a RT-N66U, it's brilliant
- circa 13y ago
  I second Tomato. It has done me no wrong on my 4+ year old AP
  - emmelaich 13y ago
    Tomato is excellent. I'll note that there is https://code.google.com/p/rt-n56u/ https://code.google.com/p/rt-n56u/ as well, though I know nothing about except what I read there. I also heard that earlier ASUS routers had awful UIs and that they licensed Tomato from Polarcloud ... but I see no evidence of that (yet).
driverdan 13y ago
There are vulnerabilities and weaknesses in everything. Your operating system, your apartment's gate lock, your car's firmware. If you worry about things that are outside of your control you'll never stop worrying. Focus on what you have control of. Put an open source firmware on your router.

by mikevm 13y ago

anon1385 13y ago

>You can't trust web service providers, you can't trust your ISP, you can't trust your gov't, you can't trust hardware providers. You forgot your compilers: http://cm.bell-labs.com/who/ken/trust.html http://cm.bell-labs.com/who/ken/trust.html

deleted 13y ago

[deleted]

lwhalen 13y ago

I've got TomatoUSB on my Asus router. EXCEPTIONALLY powerful and stable firmware with great wireless coverage. This past weekend, pardon my humblebrag, I was able to segregate my network into separate VLANs for the home LAN, guest wireless, and a DMZ for my servers, with appropriate access ACLs (via iptables) for each. I feel very secure with this firmware, far moreso than with the Asus stock one that's for sure!

bestham 13y ago
Thinking about doing something similar, would you care to do a writeup? I'm deeply scared of iptables.
MrSouth 13y ago
I'd recommend http://tomato.groov.pl/ http://tomato.groov.pl/ running it on a RT-N66U, it's brilliant
circa 13y ago
I second Tomato. It has done me no wrong on my 4+ year old AP
- emmelaich 13y ago
  Tomato is excellent. I'll note that there is https://code.google.com/p/rt-n56u/ https://code.google.com/p/rt-n56u/ as well, though I know nothing about except what I read there. I also heard that earlier ASUS routers had awful UIs and that they licensed Tomato from Polarcloud ... but I see no evidence of that (yet).

driverdan 13y ago

There are vulnerabilities and weaknesses in everything. Your operating system, your apartment's gate lock, your car's firmware. If you worry about things that are outside of your control you'll never stop worrying. Focus on what you have control of. Put an open source firmware on your router.