Advanced CIA firmware has been infecting Wi-Fi routers for years

arstechnica.com

60 points·65827··11 comments

This article gives the manufacturers involved:

https://www.theverge.com/2017/6/15/15812216/cherryblossom-ci...

"Asus, Belkin, Buffalo, Dell, DLink, Linksys, Motorola, Netgear, Senao, and US Robotics"

I use a TP-Link router, so I guess my router can be hacked by the Chinese govt rather than the US.

"Barring guidance from the Sponsor with regards to particular devices of interest, Cherry Blossom has attempted to support wireless network devices that are ubiquitous and readily available (at least in the US)."

_in the US_

Just think about all these routers and modems, being handed out by pre-configured the operators and that are never updated or patched.

|Able to search for people by their VoIP number.

That is just evil.

Uch.

What's the best router software I should be running for home use? Business use?

https://www.ubnt.com/edgemax/edgerouter/

Ubiquiti's EdgeRouter gets my vote if you're willing to muck around on the CLI to get to advanced features.

openbsd

I'm sure you can get it to run on some computer that act like a router or grab some embedded stuff.

I haven't tried it too much work. But openBSD is solidly crazy. They sacrifice performance for security and security is always the first thing on their mind and anything else are distant second. They code review too.

http://www.bsdnow.tv/tutorials/openbsd-router#hardware

I really like routeros from mikrotik, but it was part of the leaks as being hacked... so ymmv

Maybe pfSense for your router, with a separate wireless access point.

or https://opnsense.org/

i second this. works great for my home!

your tax dollars at work.

Reply on news.ycombinator.com