US considers banning TP-Link routers over cybersecurity risks (www.bleepingcomputer.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 19 Dec 2024 12:02
https://sh.itjust.works/post/29711674

#cybersecurity

threaded - newest

henfredemars@infosec.pub on 19 Dec 2024 12:59 next collapse

Yes. Please. Do it. These are terrible.

I’ve extracted their firmwares before. Not only is the software many years behind, but it contains changes to important, security relevant parts of the system like sshd that can’t possibly be good for security.

CleoTheWizard@lemmy.world on 19 Dec 2024 15:11 next collapse

And yet TP Link is consistently a very well rated brand both for software and for hardware. I’m currently looking for a WiFi 6e/7 router and most sources agree they’re the best. Both Amazon reviews and trusted sources like rtings say this.

Basically I hear your point but the US does need to have a good reason to ban these because otherwise they seem to just be taking away good hardware from people

optissima@lemmy.ml on 20 Dec 2024 04:22 collapse

Look at GL-iNet I think is the name

taladar@sh.itjust.works on 20 Dec 2024 06:56 collapse

It is not so much that TP-Link is great, it is more that American brands like Cisco keep getting caught putting deliberate security holes like hardcoded credentials into their products every other year or so and yet they seem to never consider banning those.

grue@lemmy.world on 19 Dec 2024 17:23 next collapse

Are TP link routers still untrustworthy after you’ve flashed OpenWRT on them?

grue@lemmy.world on 20 Dec 2024 01:42 next collapse

(That wasn’t rhetorical, BTW. I have TP-link gear running OpenWRT and am wondering if I should be worried about it.)

Croquette@sh.itjust.works on 20 Dec 2024 05:20 collapse

No because it’s an up to date firmware with the latest security patches.

Unless the hardware is also shitty and has some vulnerabilities.

multiplemigs@sh.itjust.works on 23 Dec 16:23 collapse

put together a government worth two squirrel farts and then maybe stuff like this would carry some weight… otherwise I would almost RATHER a foreign govt get access through shady hardware bullshit.