The core message here that everyone should reboot their router is simple enough to survive on Twitter and be understood, whereas specific instructions about which devices are bad will likely be screwed up.
https://arstechnica.com/information-technology/2018/05/fbi-s...
That's, uh, "reassuring".
In the long term, you want a fix for your router, or you want a new router.
Mine is similar to one of the affected units, enough so that it's likely vulnerable. I'm looking at replacing it.
I don't think we are so far from the day that "high risk" will mean anyone who opposes the government.
> Mine is similar to one of the affected units, enough so that it's likely vulnerable. I'm looking at replacing it.
That's probably wise.
- the continued militarization of police
- classifying 66% of houses as constitution-free border crossings
- holding citizens for years without charges or trial
- a for-profit prison system that engages in de facto forced labor
- criminalizing mental health issues and withholding psychiatric care from insured people.
For the record, these things have all been going on for multiple presidential administrations, and have enjoyed bipartisan support.
You're going many steps beyond simple exaggeration and pushing into extreme hyperbolic territory.
> classifying 66% of houses as constitution-free border crossings
You're inventing that, such a thing has not been classified by the US Government. If the government - local, state or federal - wants to search your residence in NYC or Los Angeles, they still need a warrant or equivalent court approval. If you were right, that wouldn't be the case.
> holding citizens for years without charges or trial
Show me the specific figures you have on how many times that has occurred in relation to the total number of people that have been arrested over a relevant time frame. It's extraordinarily rare in fact. Using events with very few instances to argue a premise of widespread occurrence, is an immense logic fail.
> a for-profit prison system that engages in de facto forced labor
The government prison complex (the supposedly non-profit oriented mass incarceration machine) is and has been dramatically worse. Over 95% of all people that have been put into prison in the last 40 years, during the war on drugs and mass incarceration phase, have gone into government prisons. During the epic Reagan and Clinton prison boom, the private prison industry had a single digit share of the prison inmates.
And now the incarceration rate is rapidly declining and has been for a decade. We're also pursuing the end of mass incarceration policies, with wide bi-partisan support. And we're also pursuing the end of the war on drugs, via legalization and decriminalization policies all over the US. If I were to use your argumentation approach, that means the expansion of private prisons is causing all of those things and is a good thing: as the private prisons have expanded their market share the last decade, all of those good things have finally started to happen.
> criminalizing mental health issues and withholding psychiatric care from insured people
What share of the population has suffered from the criminalization of which mental health issues? How many insured people are being kept from psychiatric care? Being vague doesn't support your topline premise, it detracts from it.
You've made an extraordinary claim and you didn't support it with much of anything.
That's like saying liver cancer is better than pancreatic cancer - true but not comforting.
In one case they went to court to get an OK from a judge to use the malware and seized domain(s) to then activity remove it from people's computers. They asked a judge because while they can seize a botnet, actually altering people's computers might be seen as bad so it seems they went about it the right way.
If they were going to be all evil I doubt they'd be talking about rebooting routers and such ;)
Also, chances are courts would deny them such orders on the grounds that it would be easier for about everyone involved if the FBI just asked the router’s owner to restore its firmware (why would the FBI need a court order against foo because bar hacked its modem?)
Correction: according to the original report a reset will mitigate the stage 2 and 3 attack only
Source: https://blog.talosintelligence.com/2018/05/VPNFilter.html?m=...
If the vendor really, really wants to update the firmware, have the write-enable switch be a physical one, not a software switch.
When firmware can't fully trust itself (and it cant), the correct option is to deffer ultimate judgement and control to the physical owner.
It's not clear how stage 1 installs. Is it into the (hidden) base Linux install in rc.local or whatever, does it get into the bios/firmware of the computer.