Hacker News Reader

If the router were compromised, what use would "Having a competent firewall on your residential router" be?

The edit was in response to "network operator's routers [...] don't perform any sort of filtering" and had nothing to do with C2 traffic?

View on HN

The original comment I responded to said “There are countless routers in between you and your destination which you can't audit anyway. End devices long since consider the routers to be compromised and have everything verified and encrypted in transit.” My point is that having a home router that does not allow incoming connections to the devices behind it - whether that’s due to compromise or misconfiguration - prevents substantial attacks. It’s hard to call a compromised router a “competent firewall”.

Reply on news.ycombinator.com