US considers banning TP-Link routers over cybersecurity risks (www.bleepingcomputer.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 19 Dec 12:02
https://sh.itjust.works/post/29711674

#cybersecurity

threaded - newest

henfredemars@infosec.pub on 19 Dec 12:59 next collapse

Yes. Please. Do it. These are terrible.

I’ve extracted their firmwares before. Not only is the software many years behind, but it contains changes to important, security relevant parts of the system like sshd that can’t possibly be good for security.

CleoTheWizard@lemmy.world on 19 Dec 15:11 next collapse

And yet TP Link is consistently a very well rated brand both for software and for hardware. I’m currently looking for a WiFi 6e/7 router and most sources agree they’re the best. Both Amazon reviews and trusted sources like rtings say this.

Basically I hear your point but the US does need to have a good reason to ban these because otherwise they seem to just be taking away good hardware from people

optissima@lemmy.ml on 20 Dec 04:22 collapse

Look at GL-iNet I think is the name

taladar@sh.itjust.works on 20 Dec 06:56 collapse

It is not so much that TP-Link is great, it is more that American brands like Cisco keep getting caught putting deliberate security holes like hardcoded credentials into their products every other year or so and yet they seem to never consider banning those.

grue@lemmy.world on 19 Dec 17:23 collapse

Are TP link routers still untrustworthy after you’ve flashed OpenWRT on them?

grue@lemmy.world on 20 Dec 01:42 next collapse

(That wasn’t rhetorical, BTW. I have TP-link gear running OpenWRT and am wondering if I should be worried about it.)

Croquette@sh.itjust.works on 20 Dec 05:20 collapse

No because it’s an up to date firmware with the latest security patches.

Unless the hardware is also shitty and has some vulnerabilities.