FCC considering a proposal to lock down devices with a “modular wireless radio”
libreplanet.org
libreplanet.org
Take Action Now!
The FCC is asking for comments on this proposal. The most important thing you can do is comment on the FCC's proposal and tell them you want to be able to control your computing devices. Will you do this?
Comment deadline extended to October 9.
Instructions:
1. Go to the Federal Register and press "Submit a formal comment" (https://www.federalregister.gov/articles/2015/08/06/2015-184...)
2. Start your comment by respectfully asking the FCC to not implement rules that take away the ability of users to install the software of their choosing on their computing devices. Additional points of emphasis you should consider adding:
- Wireless networking research depends on the ability of researchers to investigate and modify their devices.
- Americans need the ability to fix security holes in their devices when the manufacturer chooses to not do so.
- Users have in the past fixed serious bugs in their wifi drivers, which would be banned under the NPRM.
- Billions of dollars of commerce, such as secure wifi vendors, retail hotspot vendors, depends on the ability of users and companies to install the software of their choosing.
3. Enter your name and address. This is a public comment and your personal information provided will be publicly available.
Once you've submitted your comment, make sure to encourage others to submit comments opposing these restrictions on computing devices. Use the #SaveWifi hashtag on Twitter or your favorite microblogging services.
Google cache: http://webcache.googleusercontent.com/search?q=cache:https:/...
This campaign reminds a lot of the bad old days of Microsoft and spreading Fear, Uncertainty, and Doubt. This is not an evil policy that has nefarious purposes, it's about making sure people don't intentionally use their devices that will cause damage to the neighbors on the bandwidth spectrum. Also, keep in mind that the unlicensed regions were not created for communications, but rather so that medical and industrial heating devices have some range of frequencies to operate magnetrons, etc, without disrupting sensitive communications. Wifi uses them mostly because they do go unused the majority of the time.
Most/Alot of research, especially security research is one with out the manufacturers permission,I highly doubt they will have licensing in place to do investigation.
>>Device makers choosing not to update their devices should honestly be handled through tort; a few lawsuits against companies making defective routers will get makers to shape up.
You may want to consult a lawyer on that, since most of the manufacturers EULA explicitly indemnify them from this type of liability. If this was possible Microsoft should be bankrupt by now. My 2.5 year old Samsung phone has need seen an update for over a year, many security problems have been found both Samsung and my carrier say "Buy a new phone" yet somehow I think me attempting to sue them for not updating the device will be less than successful. Instead the best option I have is a Custom non-OEM ROM that is still being updated.
>>reasonable efforts have
Most of the people posting in support of this measure, including yourself seem to have a vastly different defination of "reasonable" that people like myself for who are open source / open hardware advocate. I bet you believe secure boot, UEFI and other measures are "reasonable" as well.
>> This is not an evil policy that has nefarious purposes, it's about making sure people don't intentionally use their devices that will cause damage to the neighbors on the bandwidth spectrum
The Road to hell is paved with good intentions, it may not be the FCC's goal to lock in hardware and to prevent users from replacing OEM operating systems, we can call it an "unintended consequence" if you wish. At the end of the day however it is a distinction with out a difference. If this rule is adopted, innovation, consumer freedom, and consumer security will suffer.
The unlicensed regions were created because they absorbed RF very highly due to water and oxygen. The fact that we transmit in them in spite of the fact that from an RF perspective they totally suck is a tribute to the the fact that engineering ingenuity is far easier than navigating government regulation.
http://mimosa.co/news/36/75/Mimosa-Advocates-Expansion-of-23...
The model for the future that maximizes capacity of the spectrum isn't just more unlicensed spectrum, but imposing basic rules on unlicensed spectrum like we do on roads. One thing people forget is that road rules aren't just about safety, they're about keeping traffic moving smoothly. Exactly the same principles apply to cognitive radios.
So... yeah. Well, that sucks.
Much of the radio spectrum is shared. As an overly-simplified explanation, that means only one transmitter may be in operation at a time, or the frequency in question in that area will be useless.
Spectrum is also segmented and some segments require a license to use. The FCC (and all the other foreign national bodies that regulate radio) do so for the good of everyone. If they did not, we could not turn our lights on and use a cell phone or watch TV at the same time ;)
Also, the rules have been around for a long time. This is an old problem.
Here we have imaginary problem (wi-fi "interference"), we have FCC who wants to shift blame for it to somebody else, so they try to force measures on users which, if properly enforced, will cost them tens of billions USD in collateral damage.
Because mind you, 99,9% users reinstall their OS a) not to mess with wi-fi, and b) to derive some personal gain from it. Where they got the right to sabotage millions of people?
The end result is very similar to the WiFi situation, they ruined it for everyone. Now it's difficult for licensed amateur radio operators to buy amplifiers for use with low-power transceivers. The FCC has rules about what the minimum power input to amplifiers can be, and require manufacturers to go to great lengths to prevent the amplifier from working on CB frequencies. This reduces performance and reliability, and increases expense, all to prevent something no licensed amateur would do.
That said, the FCC has only a minimal enforcement budget, so there are plenty of illegal CB amplifiers readily available on eBay. The rules only hurt legitimate American companies and users of licensed radio services.
Note, for example, the many stories people tell about microwave ovens interfering with wifi:
https://www.google.com/search?q=wifi+interference+microwave
And when open up a spectrum analyzer and look at how much power is on the wifi bands around me, it sure looks like interference is an actual thing. So it seems to me that interference is a real problem, which is why we have the FCC regulating this stuff in the first place.
The right they have, by the way, is that we the people created the FCC to solve the problem of radio interference:
https://en.wikipedia.org/wiki/Federal_Radio_Commission
Now it could be that there are better ways to solve the problem. But given the people totally losing their shit in classic "ehrmegerd guvmint steelin my freedums" style, I am wondering if this issue belongs in my bucket labeled "antivax, fiat money, 911 truth, etc".
People playing around with unlocked SDRs is not even a rounding error when it comes to causes of interference.
http://www.wired.com/2010/09/wireless-explainer/
The "imaginary problem" (I don't know how imaginary it is) is people modifying software so that their devices interfere with other, licensed frequencies.
Personally, I don't think there are many people that will buy an SDR and amplify the signal outside of legal ranges. I also think that any people that will do that are also capable and willing to that without the convenience of SDR.
I can imagine this theoretically being a problem with wifi routers: "Download this custom build of OpenWRT and this custom wifi driver, and you can get wifi without interference from your neighbors".
Right now, today, in the real world, it doesn't matter whether the phenomenon we commonly call interference is a property of radio waves or a property of the receivers we use or the will of benevolent aliens watching us in their lab. The fact is that it causes communications systems not to work properly.
This is a totally worthless question to ask about a law or rule.
The general form would be "why was the law created?"
And of course, there's never a law with the (disclosed) purpose of killing all kittens, giving money to friends or destroying an enemy. On the contrary, every law is always spun on some kind of "will you think of the children".
The only good question you can ask about a law:
"What are its consequences?"
Interestingly, your first question was more in this sense.
> "What are its consequences?"
Also, what are the consequences of not having the law?
Which I suspect was the intended meaning of:
> what was the justification for imposing such a restrictive rule?
More interesting is the question of whether there are other forces involved. Cringely postulates the NSA, but I do think incumbents more likely:
UWB should, in theory, be able to pump a lot more bandwidth down the same wires. Both the cable companies and the phone companies would be salivating at a system that effectively automatically avoids nulls on coax or twisted pair.
However, UWB requires highly accurate, synchronized clocks. Keeping those clocks in sync is non-trivial.
The fact that they could never get it to work over wire means that they had no hope over wireless.
For example, WiFi routers used to be able to operate on the same frequencies as TDWR weather radars. They were supposed to listen to the frequency for a while, and not use it if it was near enough to a radar installation to cause interference. People modified their routers to skip the listening phase, and introduced interference with the weather radars.
Now nobody gets those frequencies. The average hobbyist could apparently not bother to understand the rules or the consequences of their actions.
(TDWR is safety-critical, used to compute surface winds near runways at major airports, giving pilots and ATC critical information about whether or not they could safely attempt a landing. If you hit wind shear 100 feet above the ground, you crash. Your quest for slightly faster WiFi speeds has the ability to kill someone.)
The previous approach to monitoring for wind shear conditions was to have a surface station at the airport, and hope that the conditions at the surface station were the same along the entire final approach corridor. Sometimes this was true. Sometimes it wasn't and people died. Aviation is a lot safer these days, even though we fly many more planes in the same airspace. Even an imperfect technology adds to the safety calculus.
Giving that safety and capacity up so you can use a shitty low-power low-bandwidth frequency in the 5GHz wifi band is not appealing to me. (There are plenty of full-power, 80MHz-wide frequencies that are WiFi-only. Use those!)
The FCC should have never allowed sharing to begin with. It was nice of them to try, though, given that much of the US is not in interference-range of TDWR stations.
> 451 Unavailable > This content is not available in your country.
This is a good thing.
This is NOT acceptable.
Punishing people for sending on illegal frequencies: Okay.
Restricting what people can do with devices they paid for: NOT OKAY.
Also, another example: You recently saw the post on Hacker News how someone collected images from weather satellites by modifying a normal satellite receiver? This would not be possible under the new rules.
People should be punished for doing illegal stuff, not for being able to do illegal stuff.
Can you please give an example ? also couldn't be solved by designing the correct API for the communications processor ?
Every transmitter I can think of requires FCC type certification. If you're a police department, you can't build your own radio to use on the spectrum you've obtained from the FCC, you have to buy something that's type-certified. Similarly, you can't just go ahead and transmit on the unlicensed bands, that also requires type certification. SDRs are sold as test equipment; using them as radio transmitters is generally illegal.
Now if you're a licensed amateur radio operator, SDRs are great. You are completely allowed to use them to transmit on any frequency for which your license class allows. But there is a special provision in the laws for amateur radio operators; we are specifically licensed to build our own equipment. (And keep in mind that the use case for amateur radio service is limited by the same law; if you're not using it to establish 2-way communication with another amateur, you're doing something illegal. There are exceptions, though, and the FCC doesn't seem too picky. WSPR and other propagation beacons are strictly one-way affairs, but are tolerated.)
I don't think "My decisions have made it hard for me to comply with this reasonable regulation so I shouldn't have to" is a very good argument.
People should be punished for doing illegal stuff, not for being able to do illegal stuff.
There is not much constructive use for something that would breach these regulations. Contrary to some of the FUD being posted in this thread, the regulations don't appear to be about custom firmware for the UIs or even signalling on a device. They're about the control software for the radio itself, to ensure it plays nicely with everyone else. That software is typically extensively tested and certified before being licensed for use, and any supplier whose software didn't work properly in the field could expect a very rapid and unsympathetic response from the authorities.
What a lot of people fail to understand is how disruptive a radio device that doesn't follow the standards can be. I worked for a radio network operator for a while. One day I got into work to find there were widespread reports of radios not operating properly across a major city. Someone was transmitting something out of spec and causing sufficient interference to effectively bring down the whole network. Do you know what happens at that point?
This is what happened that day. Real people got into real vehicles and started moving around a search pattern with relatively crude sensors, trying to locate the source of the interference. And then when they found it, they had to figure out how to shut it off. That involved gaining access to premises where the rogue device was located. Ideally you do that with the consent of the residents, because the operator of the rogue device may not even realise that it's not behaving correctly. Worst case, you're looking at forcing entry, which means bringing in other public services who are allowed to do that sort of thing with the appropriate authorisations, which in turn have to be sought from the appropriate authorities before anyone can move. And then once you've got into the premises you still have to find the device itself, and then you have to figure out how to turn it off.
Contrary to any movies you've seen, this process can take a considerable time, probably at least several hours unless you're very lucky. During that time the entire system will be operating at reduced capacity, if at all. Think about the range of a modern cell phone, and consider that any device that can transmit over that range can also interfere with the control channel for any signalling system within its range. Also consider that we're talking about changes that might increase the power and therefore the range of the device, or might change the device so it's using different frequencies and disrupting other forms of transmission/communication, not just whatever it was designed to work with originally.
Bottom line: even one small rogue device on a radio network can cause serious disruption over a wide area, and not all devices covered by these regulations will be small or have relatively low-powered transmitters. Imagine a whole city block or business park where wireless devices didn't work all day. Imagine a whole city where mobile/cell phones weren't reliable. Imagine a major incident where emergency services couldn't communicate properly to co-ordinate their response because their radios didn't work, or where the entire response was delayed by several minutes because no-one could find a landline to even call the emergency services in the first place. You get the idea. And just to be clear, this is not some paranoid fear of a hypothetical problem. It actually happens, just fortunately not very often, thanks in large part to the kind of regulatory regime we're talking about here.
It's true that with any sort of government regulation you have limitations on individual freedom. Laws do that, and should never be made lightly. But at the risk of ending on an inflammatory note, consider that while people can hold strong views on whether private individuals should be allowed by law to own and shoot guns, and reasonable people can debate the pros and cons of that, no reasonable person thinks it's a good idea for anyone who wants one to be allowed a WMD where they can push a button and kill everyone in a city. There simply aren't any good uses for that kind of technology, and the damage one person can cause to others is wildly disproportionate to any personal freedom given up by someone who for some reason wants such a device even though they can never use it. Obviously I'm not suggesting the threat from a rogue radio transmitter is comparable to the threat from a nuclear bomb, but it really is a significant risk and even potentially a matter of life and death.
The firmware running on the end user device and provided by its manufacturer probably doesn't even have access to the firmware running on the radio component in many cases, in which case the kind of regulations we're talking about would make no difference at all to that device.
If the main device firmware does have access to reconfigure the radio component, these regulations are a good thing, because it means you can afford to let end users swap out the main device firmware without risking them breaking the radio with adverse consequences for everyone else nearby. If you didn't have that safeguard, the only safe thing to do would be to lock down the entire device in exactly the way you're describing.
You are arguing against the regulatory framework that makes your desired outcome practical to achieve.
It’s similar to the gun debate or the "speed limits on the autobahn" debate.
Funnily, I’m on a different side in each of these 3 debates, but the issue is still there.
You can debate the merits of useful technologies that are also dangerous. Many technologies have both negative and positive applications. Sometimes in reality those technologies are used more often for negative purposes. We then get conflicts where the same tool that can protect an individual from harm can also harm others and/or protect the individual from the consequences of their harmful actions. We also get rather different kinds of conflict where a technology can be a net benefit to society because it helps many people but that comes at a high cost a few innocent people who will lose out in some way.
However, when there is nothing to balance in how a technology is employed, when realistically it can only be used for harmful things or it causes wildly disproportionate harm, I think the ethical stance must change as well. Some things can't be fixed afterwards, and in that case mere deterrence isn't always enough and I do think formal regulation can be justified.
In Germany, we ban guns, but don’t really restrict people modifying routers, as long as it doesn't interfere with anything.
But in this case there is:
- open firmware
- security research
- running radios outside their regulated envelope without interfering e.g. because you're building a directed link between two sites in a rural area. With locked-down device you can't do that even if you got a permit. You'll have to buy more specialized, more expensive hardware
Reading some of the other comments in the thread; two things become clear to me. People causing their devices to behave badly have no idea what the ramifications are, lacking knowledge in both regulatory issues ("what's DFS? what's TDWR?") and RF-related issues ("jacking up the power can't cause spurious emissions!") [note]. These people should not be modifying their radio equipment, they don't have the understanding required to do so safely.
That said, you can be licensed by the government to prove that you understand these things, and then the government gives you free reign to build your own equipment and basically do whatever you want. If I were modifying my WiFi equipment for Part 97 operation (questionably legal for various reasons I won't go into), I'd know to look for things like: interference with primary users of the frequencies, spurious emissions, permissible RF exposure limits, and so on.
"Unlicensed" doesn't mean you can do whatever you want. People seem to think it does, however, and the FCC has a very tiny enforcement budget, so it seems natural to go after the device manufacturers rather than the end users. The device manufacturers already pay to have their devices certified, a few more hoops don't matter to them (and save the taxpayers money), and a well-locked device will prevent even the most ignorant hobbyist from causing plane crashes, so I understand their logic.
I am probably going to write them a letter opposing the changes, but mostly from the perspective of amateur radio operators rather than "I can do whatever I want in my own home".
[note] Let me share some choice quotes from elsewhere in the thread:
"Sounds like those TDWR systems are in dire need of an upgrade if that's enough to cause fatalities."
"The hardware should know the amplitude of the input signal and what maximum gain can be applied to it before these detrimental effects set in. [...] I'm not going get a multi-gigahertz-capable scope costing tens of thousands of dollars just to tweak my home router."
Here's a draft of the rules where they specifically ask how You will prevent end users from installing DD-WRT.
Third-Party Access Control: What prevents third parties from loading non-US versions of the software/firmware on the device? Describe in detail how the device is protected from “flashing” and the installation of third-party firmware such as DD-WRT.
This is incorrect. Various sites have done a really shitty job at linking directly to the relevant documents, but see this: https://apps.fcc.gov/kdb/GetAttachment.html?id=1UiSJRK869Rsy...
Note that vendors are required to "Describe in detail how the device is protected from 'flashing' and the installation of third-party firmware such as DD-WRT."
This is specifically about blocking all use of custom firmware.
https://www.federalregister.gov/articles/2015/08/06/2015-184...
That seems reasonably clear in what it's talking about, or at least what they're intending to cover. For example:
"The Commission proposed to require that an applicant for certification explicitly describe the RF device's capabilities for software configuration and upgradeability in the application for certification. This description would include all frequency bands, power levels, modulation types, or other modes of operation for which the device is designed to operate, including modes not enabled in the device as initially marketed. Also, an applicant for certification would have to specify which parties will be authorized to make software changes (e.g., the grantee, wireless service provider, other authorized parties) and the software controls that are provided to prevent unauthorized parties from enabling different modes of operation."
There's no reference to specific firmware platforms like DD-WRT or OpenWRT there.
Is this a case of some documents describing preliminary consultations and others a final situation that differed from what was contemplated originally?
For that matter, is it actually the case that some routers don't fully isolate the radio control software as intended by the regulations, in which case installing custom firmware like DD-WRT or OpenWRT really would be a risk, in which case the intent of the regulations really would be to prohibit the installation of that custom firmware in that particular context because it does present exactly the threat they are trying to control?
> We even have a few posters in this discussion talking about how they hate these new requirements because it means they can't run their routers illegally anymore.
Are you under the impression that the sole purpose of custom router firmware is to access restricted channels? Custom firmwares contain many very useful, legitimate tools, and also happen to enable region-shifting for users who want to keep their old router when they move, which unfortunately lets malicious or ignorant users access locally unauthorized channels.
As for the rest, the U-NII Device Security document I posted above is pretty clear about prohibiting all unsigned firmware, explicitly including DD-WRT.
It's on fcc.gov, so it's probably legit. It dates back to March, so it's conceivable that it's been modified or superseded since then; I haven't been able to find anything to indicate so, but I'd be happy to be wrong.
Basically, there seems to be a lot of confusion stemming from blogs that heard about the document that I posted, but only linked to the document that thejosh posted. I found this doc via the CNXSoft post that appeared on HN yesterday [1], which mentioned the "protected from flashing" line and linked to Etherpad notes from a presentation, which linked to the U-NII Device Security v01r02 document that I posted above. It's kind of a ridiculous chain, so I can see why people were confused. You're right that none of the documents directly linked in this thread talk about blocking custom firmware; when people are talking about that, they're thinking of the U-NII Device Security document, not the "Equipment Authorization and Electronic Labeling for Wireless Devices" proposed rule.
> Is this a case of some documents describing preliminary consultations and others a final situation that differed from what was contemplated originally?
Possibly. They may also be describing different aspects of the FCC's evolving wireless policy. I haven't followed the rabbit hole deeply enough to determine for sure whether the FCC is still currently on track to block custom firmware, but it appears that they were as recently as March.
> For that matter, is it actually the case that some routers don't fully isolate the radio control software as intended by the regulations, in which case installing custom firmware like DD-WRT or OpenWRT really would be a risk
Oh, yes, certainly. Most of these firmwares are designed to be useful for users all over the world; IIRC, the one I use (Tomato) lets you select your region from a pull-down, and then enables the channels appropriate to your claimed region. (You can achieve the same thing by downloading the manufacturer's firmware intended for a different region; custom firmware is not required.)
I think this was well-meant on their part, but I agree that it is a problem, and it makes sense for new routers to block access to block access to unauthorized channels on a level that custom firmware can't touch. I just think that blocking custom firmware entirely is throwing the baby out with the bathwater.
But legit what? For example, I don't see any indication of whether it's an existing policy, a draft/proposal for future policy (which is what most of this discussion seems to be about) or something else. Who is required or recommended to read it? What happens if they don't do what it says?
Most significantly, it also doesn't seem to specify what constitutes a U-NII Device for the purposes of these rules. It would be bad if the rules had the effect of blocking custom firmware on something like a wireless router when that device included a self-contained radio component that was a black box and itself constrained to follow the normal rules for transmission equipment. On the other hand, if we're talking about running custom firmware on that radio component and/or on the main device but with the ability to reconfigure the radio component to perform outside the authorised spec, it seems to me that prohibiting the installation of that firmware is exactly what is intended, and for good reasons.
Do any android devices use open source firmware for their cellular radios? I was under the impression that all cellular radios worked only with closed source firmware + closed source radio driver, in which case _you already_ can't modify some of the software on any android device?
"The Commission proposed that certain changes in layout, included components, operating software, or variations in overall electrical or mechanical constructions that do not substantially change the overall function of the device do not require a new FCC ID."
"The Commission proposed to continue to permit Class I permissive changes for those changes that do not degrade the device parameters normally reported in an equipment authorization application (including a decrease in the fundamental emissions that does not increase spurious emissions; an improved spurious emission performance; minor variations in the enclosure or components; and software changes that do not affect RF parameters)."
The relevant passage is "Describe in detail how the device is protected from 'flashing' and the installation of third-party firmware such as DD-WRT." The FCC is specifically mandating that all custom firmware must be blocked.
B) The document is not hard and fast rules, it's a set of guidelines to ensure that the device cannot operate out of the rules. So, putting the radio controls in a separate unflashable baseband chip would be ensuring that the radio is only operated by authorized software, while the rest of the router is operated by other software.
Phone, Routers, Tablets and even some Laptops will be shipped with out the ability to change the operating system, or firmware. As that will be the cheapest way to comply with the regulation and since less than 1% of the customers ever bother changing there will be no backlash
This will be a nightmare for Computer security, and innovation.
I hope you love botnets becuase the FCC is creating the next wave of them with this moronic regulation.
What real world do you live in? Because in the real world I live in, the kind of component and firmware we're really talking about here are probably bought in as a ready-made part by whoever makes that phone, laptop, router, etc. They might not have any access to reprogram it at all.
What these kinds of regulations are effectively saying that if they do have that ability then for the device to remain properly certified for use as required by the regulatory authority there must be safeguards to prevent certain types of potentially harmful change or you "void the warranty" from a regulatory point of view. In that case, you revert to the default position you were in anyway, which is that you have to get the device and its software properly approved before you can lawfully use it.
One of the requirements for hardware vendors is "Describe in detail how the device is protected from 'flashing' and the installation of third-party firmware such as DD-WRT."
They are explicitly trying to illegalize custom router firmware, even though all the things that need to be prevented could be handled by separate hardware lockouts that wouldn't affect the legitimate uses of DD-WRT.
This is a good thing.
I fail to see much difference between installing alternative OS on your PC and installing third-party software.
Building these firmware images is something you are (usually) only equipped to do under NDAs from the silicon manufacturer (or only done by request from the manufacturer).
My understanding (and what I have gathered from previous threads on the subject) is the FCC is going after the embedded radio firmwares, and mistakenly (or due to extreme lack of knowledge) named OpenWRT,DD-WRT as offenders.
Otherwise, the effect of this would be to outlaw PCIe and USB WiFi, Bluetooth etc. cards/adaptors unless sold inside a computer with a locked bootloader.
Lenovo already does this for laptops, you have to use a Whitelist Wifi card, they claim it is to comply with existing regulations from the FCC, which this will expand.
It is that wifi adaptor maker that is responsible for ensuring that the radio stays in compliance.
The laptop maker generally will only need to deal with the rules from part 15B, unintentional radiators. The laptop maker won't have to lock down the laptop OS.
I guess I am going to be a criminal the day they tell me I cannot run openwrt.
Looking at the noxious behavior of drone owners sets a few examples of the type of thing I'm referring to.
But they are now making laws to ensure the bulk of the population commits a few felonies each day, changing your phone software from stock, changing your router software from stock = prison? How exactly does that harm/help society?
How does this harm society? Imagine your wifi router becoming useless cause your neighbor decides to modify his and boost his output which overpowers yours. Plus adding additional frequencies that render your wireless phone useless.
Imagine there were no regulations. Such things would be rampant as they were in the past.
Let me think, no.
> If you're overdriving your amplifier, ... distortion harmonics
RF amplifiers are not linear at any amplitude! RF is not audio.
I don't supply the input signal to that amplifier; it's all within the router. The hardware should know the amplitude of the input signal and what maximum gain can be applied to it before these detrimental effects set in. It should not permit higher gains than that.
I trust that it doesn't, and don't give a shit beyond that.
I'm not going get a multi-gigahertz-capable scope costing tens of thousands of dollars just to tweak my home router.
I don't think that the hardware has to be a black box to be compliant; it just has to disallow combinations of parameters that are outside of the legal (or technically correct) area.
If the chips themselves enforce this, then we can still have a device on which you can run OSS firmware.
And anyway, that's the right way to do it! If the hardware doesn't enforce the rules, and you're relying on the black box combination of hardware and software, that is less safe. Maybe exploits can be found to get around the software, and then -- wee -- let's crank that amplifier until it glows, and use illegal channels, etc.
This is why things are done in firmware, so the factory can configure particular runs of boards for legal sale in whatever country they're attempting to manufacture to sell in that day. Now, for the sake of it being cheaper, many devices may have just one big firmware blob: this is more common in devices like wifi routers than other things (e.g. cell phones).
I am a researcher in RF-related technology: my personal views are that the radio firmware should be kept separate from the rest of the software running on the device (fairly similar to what many phones do with a separate baseband), with the ability to upgrade the radio bits being restricted to a) the manufacturer and b) users that the FCC has approved to make such modifications -- this would provide a sane way to certify groups who can make these changes, both for research purposes and for the OEMs that are integrating the RF capabilities into some larger consumer device.
In addition, there's many times where we've purchased hardware and performed modifications in-house to the control software, specifically because we DO have a license from the FCC to do things outside of what would be allowed for normal consumers. Forcing special hardware runs for things that aren't locked down and can be used by the couple hundred groups (if that) in the country who do this sort of thing is going to be even more prohibitively expensive.
Finally, I'm extremely aware of the thought processes that would lead manufacturers to lock everything down if they're forced to lock anything down, and this could be mostly worked around by making the manufacturer of the RF hardware (who typically isn't the company selling you a device) responsible for those protections. They won't have any desire or ability to touch the other parts of a device, so they won't really be technically able to lock them down in the best case scenario. This gives a lot of freedom for the higher-level software to be kept in a state where it's easy for users to modify.
You should operate your hardware within the limits specified by your local laws. Saying "I trust my hardware won't do anything wrong and don't give a shit beyond that" is not acceptable.
For instance, back then you were required to have an FCC license to operate a CB radio, but not one user out of a thousand bothered to get one.
Regulations and laws aren't magic.
There is a huge difference here.
Because I would love not having to pay the 2000 bucks for an Ettus unit if they are apparently this widespread.
Especially since from the headlines it appears that they're considering a software based approach.
Exactly what are you disagreeing with? Going by your comment you seem to think that I said that a ban would have no effect at all. I did no such thing, and I would suggest that you read more carefully next time.
So, umm, no I can't actually get access to a XTC in my country where it is prohibited?
Of course I can. Even if/while such laws effect more than only a ban on the substance in question.