Hacker News Reader

Some acquaintances of mine have TP-Link routers, and they've asked me what they should do because they're concerned about the latest news about the security and privacy of these devices.

News: https://www.reuters.com/world/us/us-lawmakers-urge-probe-wif...

Letter to Congress: https://selectcommitteeontheccp.house.gov/sites/evo-subsites...

HN what is your take on this issue?

View on HN

1. Use a reliable and separate FOSS router like a physical OPNsense (Deciso DEC740 or DEC850).

2. Use above router to VLAN (or use a physically-separate interface and network topology) and isolate less trusted devices.

My view on this is, I already distrust the network. My real computers are only accessible through encrypted connections, there exists a very small number of unencrypted open ports for compatibility. There's a honeypot in place for when my iot devices inevitably get popped so I can further isolate them or replace them. Until I see it actively acting malicious, my tp-link networking gear can stay.

Reply on news.ycombinator.com