VPNFilter malware infecting 500K devices is worse than was thought

Re:VPNFilter malware infecting 500K devices is worse than wa... by oprah2018 on Wednesday June 06, 2018 @07:27PM (#17252013)

Any suggestions for a good router that is immune from this nonsense?

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by jacob019 on Wednesday June 06, 2018 @07:43PM (#17252091)

Buy a small cheap computer with two ethernet ports and run debian.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by spydum on Wednesday June 06, 2018 @08:50PM (#17252387)

And most importantly: keep it updated.

About the only thing I would trust without updates is a bsd box. And even that, may eventually fall victim.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by oprah2018 on Monday June 11, 2018 @01:18PM (#17286351)

Ok, but what if you are very busy and you don't have time for that.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by jacob019 on Thursday June 07, 2018 @01:49PM (#17258314)

which BSD? And how is hardware support these days?

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by sekh60 on Wednesday June 06, 2018 @08:32PM (#17252321)

You could build your own with pfSense.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by oprah2018 on Monday June 11, 2018 @01:18PM (#17286353)

What if you are too busy for that?

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by fungi on Wednesday June 06, 2018 @08:09PM (#17252218)

https://openwrt.org/

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by Scoundreller on Wednesday June 06, 2018 @07:33PM (#17252045)

As in another post, I’d suggest buying any router, taking it apart, identifying the flash chip, find the write-enable line in the data-sheet and MITM that line with a flip switch to block updates at all times.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by rorosaurus on Wednesday June 06, 2018 @07:45PM (#17252101)

That's actually a really good idea! I would love to see this built-in to future router models after something widespread like this. It's fairly reasonable to force users to be physically present to update. Plus, you could force them to flip the switch back by not working until the write-enable line is disconnected again.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by Johnny555 on Wednesday June 06, 2018 @08:42PM (#17252358)

It could have the unintended side effect of making people even less likely to upgrade firmware.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by Scoundreller on Wednesday June 06, 2018 @07:53PM (#17252150)

BIOS updates used to be like that. You would have to switch a jumper to do the update.

Then they got rid of that, even though most people that bothered with BIOS updates could be directed to switch a jumper around...

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by oprah2018 on Monday June 11, 2018 @01:18PM (#17286358)

Ain't nobody got time for that.

[ Parent | on HN ]

Re:VPNFilter malware infecting 500K devices is worse than wa... by MikusR on Thursday June 07, 2018 @03:33AM (#17253975)

An updated one, with sane defaults.

[ Parent | on HN ]