The many vulnerabilities in SOHO and industrial wireless routers | Hacker News Reader

The many vulnerabilities in SOHO and industrial wireless routers

blog.talosintelligence.com

24 pointsignoramous8 comments

Switches are just as bad. I bought a Cisco switch and it had a 2 year old firmware update and that was that. Now I run 7 year old enterprise hardware and it still get updates.

Selling hardware that is clearly end of life as if it is still new is the worst offence in all of hardware in my opinion. The router still have bugs so it is not like they didn't have anything to fix.

Cisco is by far the worst offender in this out of all brands I have bought.

Edit: I wrote router instead of switch. My bad.

OpenWRT still seems to be the sensible choice even if it is painful to keep it up to date.

Attended Sysupgrade (https://openwrt.org/docs/guide-user/installation/attended.sy...) makes it a lot less painful.

I don't see updates as the problem with openwrt, but its instability.

I have yet to get openwrt to run stable for long, even though I have bought five routers for it by now (WRT1200 was the last). All of them have needed manual reboot at some interval where they suddenly completely died. I gave up and switched to PC Engine's APUs with better luck, but eventually switched to OPNsense on said hardware instead. Much better stability, though not quite as fast with VPN connections.

I have churned through at least 5 routers now all with their own issues.

Until I got Linksys E8450, it's a WiFi 6 router and can NAT at 1gb on openwrt.

Some regulation is needed, otherwise it will stay the same.

The crazy thing is how controversial that comment becomes. If you look at the new 8-K public companies must file to report cyber incidents; MGM just filed their press release-nothing more. But on HN if you look at the past threads people were acting scandalized about "how dare the g men require this oppression." It'll be a long drawn out process.

Absolutely, anything which decreases the bottom line is bad business.

Legislation is needed to protect the consumer here, there are no other incentives.

Reply on news.ycombinator.com