News for hackers. Stuff that matters.

A comment on The Cheap 2.5GbE Poe Unmanaged Switch (2022). Parent comment

Re:The Cheap 2.5GbE Poe Unmanaged Switch (2022) by krasin on Friday October 07, 2022 @11:50PM (#33129659)
> Let me see if I can nail down the argument here:

Wrong nail. My home router runs OpenWRT. While it's not a 100% guarantee to be safe, it's a lot better than any closed-sourced firmware.

That said, if the choice is limited to closed-sourced firmware options, it's best to choose a reputable brand, so that the list of people who can access your router is limited to three letter agencies (US and China), as opposed to random scammers, like with all these malware-ridden Android phones from Aliexpress: https://www.cnet.com/tech/mobile/android-malware-that-comes-...

So, yes. Not buying network equipment on Aliexpress is a sound advice.

[ Parent | on HN ]
Re:The Cheap 2.5GbE Poe Unmanaged Switch (2022) by TheRealPomax on Saturday October 08, 2022 @12:17AM (#33129755)
Why would it be better than the realtek chip found in so many devices that the odds of yours being bugged are proportional to how much you're wanted by the authorities. Consumer hardware doesn't have backdoors because the monumentous task required to keep that hidden isn't worth the non-payoff of not getting the military or state secrets that would make it worth the effort.
[ Parent | on HN ]
Re:The Cheap 2.5GbE Poe Unmanaged Switch (2022) by mrmuagi on Saturday October 08, 2022 @12:47AM (#33129835)
This is just a switch but similiar 2.5gbe routers can run pfsense or opnsense with i225/i226 chips and intel/amd cpus. Servethehome covers quite a few of them.
[ Parent | on HN ]
Re:The Cheap 2.5GbE Poe Unmanaged Switch (2022) by mike_d on Saturday October 08, 2022 @03:13AM (#33130441)
OpenWRT does not replace the firmware on any of the actual controllers inside the device, which is where a backdoor would likely reside.
[ Parent | on HN ]