News for hackers. Stuff that matters.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by chatmasta on Sunday November 09, 2025 @02:51PM (#45868562)
TP-Link makes really solid products, and if you don’t want to use their firmware then almost all of them can easily flash OpenWRT. In fact most of their routers are built from OpenWRT anyway.

I installed their mesh Wi-Fi system for my parents recently and was really impressed how seamless the process was. It did involve making a cloud account which I wasn’t thrilled about, however.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by forinti on Sunday November 09, 2025 @03:09PM (#45868694)
TP-Link let me down twice.

I bought a cellphone from them many years ago and they never really supported it and I couldn't even buy a replacement battery.

Recently I bought a router with the firm intent of installing OpenWRT, but I received a newer revision that had a different CPU, less RAM, and less flash memory.

These events left a bad impression, but they do make affordable stuff with reasonable quality.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by mbreese on Sunday November 09, 2025 @03:37PM (#45868937)
> Recently I bought a router with the firm intent of installing OpenWRT, but I received a newer revision that had a different CPU, less RAM, and less flash memory.

This also happened many years ago with Linksys (prior to Cisco). It’s not that uncommon for manufacturers to release new revisions of hardware without necessarily making it clear to the purchaser. If their purpose is to deliver a router and they can shave a few cents off the BOM with less RAM, but it still works with their software, why would they care. And once new revisions have been released into the supply chain, it can be hard to know exactly what version you are buying.

In the Linksys case, IIRC they eventually re-released the first revision WRT54G as the WRT54GL (for Linux), so that people who wanted different firmware could get the exact hardware they wanted.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by myself248 on Sunday November 09, 2025 @05:03PM (#45869648)
Wouldn't it be nice if that was illegal? Sell whatever, but label it accurately, it's different hardware so it needs to have a different version label in the listing or something.

We see this all the time with SSDs, where a high-spec model is released to reviewers, then a low-spec model is mass-produced and sold under the same model number. That's fraud, isn't it? Shouldn't it be?

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by cesarb on Sunday November 09, 2025 @07:00PM (#45870584)
> but label it accurately, it's different hardware so it needs to have a different version label

In my experience, TP-Link always has the hardware revision on a label on the outside of the box.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by forinti on Sunday November 09, 2025 @07:13PM (#45870676)
It's small text on a small label that online vendors don't bother to check.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by tremon on Monday November 10, 2025 @08:52PM (#45883226)
Then don't buy online, if you can't trust the vendor?
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by tpmoney on Sunday November 09, 2025 @09:56PM (#45871856)
It’s only fraud if they sold you or marketed to you on those specs. But at least for things like reflashing your router, short of a few explicit opener vendors (like glinet) and Linksys AFTER releasing the WRTGL version, router manufacturers aren’t usually advertising on how much ram or flash memory space they have, any more than car manufacturers are advertising how much flash memory is in their ECUs. It’s not an intended or marketed purpose, so they’re not going to be changing model numbers just because they made an internal update.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Dylan16807 on Sunday November 09, 2025 @10:12PM (#45871964)
Changing the flash in a router is pretty understandable. Changing a router's CPU is going to affect core performance, and so does changing parts in an SSD, and core performance should totally count as being used to sell the product.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by necovek on Sunday November 09, 2025 @11:27PM (#45872433)
But you can optimize software and use slower hardware to maintain the same performance, as an example.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Dylan16807 on Monday November 10, 2025 @01:56AM (#45873169)
In theory. It doesn't happen often past initial launch of a product.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by necovek on Monday November 10, 2025 @02:44AM (#45873475)
If you can build a plausible case that you did this (eg. simply making your fw image smaller justifies using a smaller eMMC chip), and provide a few benchmarks that demonstrate equivalent performance in those scenarios, you'd be of the hook in any legal mandate to keep the performance the same even if your new hw revision ships with weaker hardware.

This is even a common product development strategy: ship to market asap, optimize the margins later.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by tpmoney on Tuesday November 11, 2025 @03:22PM (#45892327)
“Core performance” only matters relative to what the company is selling you though. For example let’s say a company sells 2 tiers of switch. One does 10G and the other 1G. For whatever reason when they start selling these, it’s cheapest for them to sell the same internal hardware, but with the internals underclocked in software. Some hardware hackers discover this and start unlocking the 10G capabilities of the 1G units. Later down the road, the company finds a cheaper implementation of hardware for the 1G that still can do 1G but even if up-clocked can now only do 2.5 at best. That’s a change to “core performance” but it’s also not fraud. They didn’t advertise or sell you a “switch that starts at 1G but can be unlocked for 10G”, they sold you a “switch that can do 1G”. As long as that’s what they’re still selling you, everything else is ancillary.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Dylan16807 on Tuesday November 11, 2025 @05:32PM (#45893810)
I agree with the upclocking example, but "what the company is selling" goes beyond what's on the box. If the old 1G model can do 500k packets per second, but the new one can only do 200k, that should not qualify for the same model number. There are a lot of situations where that's going to cause real problems on stock settings, after people tested the capabilities and made purchases based on those tests.

I want the most important performance characteristics that would be on a good datasheet to be maintained, even if there is no datasheet.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Loughla on Sunday November 09, 2025 @04:31PM (#45869387)
Hey, that's really timely for me.

I'm getting ready to set a mesh network for my older parents as well. Do you have any suggestions for hardware and software? I live a ways away from them so I need this to be pretty much faultless. I don't want to drive 4 hours for IT support.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by chatmasta on Sunday November 09, 2025 @04:53PM (#45869568)
The TP-Link option was great. If it was for myself, I'd build my own with OpenWRT but my goal was to minimize the chance of downtime in case I'm not available to help debug issues. They already had a TP-Link range extender running for 4+ years without ever needing to touch it, so I figured their mesh network was a good option too.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by slumberlust on Sunday November 09, 2025 @06:46PM (#45870487)
Go unifi and manage it remotely.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by 0cf8612b2e1e on Sunday November 09, 2025 @10:00PM (#45871886)
My paranoia goes against this idea. How sure are you that the remote management is hardened? Assuming that disabling external control is actually effective, that seems like it removes most practical exploits one would encounter. A network configuration for a non technical person should be so simple it does not require regular maintenance.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by travoc on Sunday November 09, 2025 @04:49PM (#45869530)
ASUS routers with Merlin firmware work well in a mesh configuration.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by jojobas on Sunday November 09, 2025 @04:39PM (#45869440)
Assuming there isn't a hidden little core running a hidden little OS somewhere.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by rs186 on Sunday November 09, 2025 @04:46PM (#45869510)
Yeah companies should be held guilty unless proven otherwise. Of course you can never actually prove anything, so they are all guilty by default. /s
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by heavyset_go on Sunday November 09, 2025 @04:58PM (#45869601)
You can't bootstrap nearly any embedded ARM SoC and run Linux without running some closed Chinese blob just to bring it up lol
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by cyanydeez on Sunday November 09, 2025 @05:31PM (#45869863)
And in reverse, you think Palentir has a transparent business model to trust with your data? I don't get why people find china more suspect than most of these billionaire led monopolies buying politicians and laws and spout paranoid gibberish about Christianity and anti Christ etc.

Both might be fundamentally evil or being, but they aren't different in danger based solely on how white they are.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by jojobas on Sunday November 09, 2025 @06:31PM (#45870358)
What about whataboutism?

And yes an American company in cahoots with the government having the ability to snoop on traffic and turn entire networks off, while bad, is nowhere near as bad as a Chinese one having the exact same capability.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by freeopinion on Sunday November 09, 2025 @07:39PM (#45870835)
The US company and the US government are 1000x more likely to leverage their position in an antagonistic way against US customers.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by heavyset_go on Sunday November 09, 2025 @10:35PM (#45872110)
Both can be bad at the same time
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by cyanydeez on Tuesday November 11, 2025 @02:25PM (#45891661)
Right, but one is "white" and the other is "dark"
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by blitzar on Sunday November 09, 2025 @04:59PM (#45869610)
Of course there is probably a hidden little os running on hidden core within the hidden hardware running the hidden os.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Sophira on Sunday November 09, 2025 @08:51PM (#45871350)
Their hypothetical does have weight, though. Damn near every desktop/laptop computer does have "a hidden little core running a hidden little OS" nowadays, after all.[0]

Obviously this particular one isn't in non-Intel equipment, but...

[0] https://en.wikipedia.org/wiki/Intel_Management_Engine

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by jojobas on Sunday November 09, 2025 @09:39PM (#45871737)
Devices from companies under direct or implicit CCP control should indeed be considered suspect until proven otherwise. Not just them, but them much more than local ones.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by kej on Sunday November 09, 2025 @04:42PM (#45869467)
Do any of TP-Link's mesh routers support OpenWrt? I didn't think there was overlap between the "easy to set up for my parents" and "easy to install custom firmware" subsets.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by oever on Sunday November 09, 2025 @06:04PM (#45870144)
OpenWRT runs well on Deco M5 with a custom build.

https://forum.openwrt.org/t/ipq4019-adding-support-for-tp-li...

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by chatmasta on Sunday November 09, 2025 @05:15PM (#45869735)
From what I could tell in the admin panel, those mesh routers _are_ OpenWRT. And they have an advanced section where you can upload a firmware .bin.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by heavyset_go on Sunday November 09, 2025 @04:49PM (#45869531)
You aren't thinking low enough for firmware.

All modern WiFi APs require closed firmware blobs that run below or parallel to OpenWRT.

You replacing the router OS with OpenWRT does nothing when the radio has full DMA access and runs its own OS on its own processor. The OpenWRT layer will have no idea what it's running/infiltrating/exfiltrating.

I say this as someone who has been running and building OpenWRT forever. It's great but it isn't a panacea.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by chatmasta on Sunday November 09, 2025 @04:52PM (#45869552)
That's why I bought a PCEngines box (one of the last of their inventory before they went out of business) with completely transparent hardware and no Chinese manufacturer in the supply chain.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by DANmode on Sunday November 09, 2025 @09:55PM (#45871855)
Neat.

If it dies tomorrow, what’s next, out of curiosity?

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by denkmoon on Sunday November 09, 2025 @10:52PM (#45872235)
For anyone asking this question I might suggest Protectli. They've got x86 systems with coreboot. That's about as good as you can get these days for open source-ness without going really obscure or outdated. I've got a VP2440 as my router and firewall. You can neuter the intel management engine with coreboot, but there's still going to be firmware blobs somewhere in it, especially if you're trying to build a wifi ap.

One of my 2 pcengines APUs has developed an issue with its solder joints I suspect. It hangs at the bootloader unless the unit is already warm. Can't complain at all, it lasted ages and problems like this are just life for things that thermally cycle, it was in a pretty extreme climate for most of its life. Doesn't help with me needing a replacement now pcengines is out of business though, hence getting a protectli box.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Retz4o4 on Sunday November 09, 2025 @11:25PM (#45872417)
Thank you! Been liking for replacements like this.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by alias_neo on Monday November 10, 2025 @04:34AM (#45874215)
> I might suggest Protectli

This is the route I went. After a decade plus of shite consumer routers and finally an EdgeRouter which died (along with Ubiquiti's quality) I bought a Protectli box, build and flashed Coreboot and run OPNSense.

It's been going strong with regular updates (and by regular I mean as regular as your Linux workstation) for over half a decade now.

It wasn't cheap, somewhere in the region of £700 after adding SSD and RAM but it's a way, way overkill model and never exceeds 10% RAM usage and 15% CPU with an IDS running and a bunch of VLANs and Gigabit symmetric WAN.

My original goal for overspeccing it was longevity, but I regret it now, I want to upgrade to 10G+ networking and I can't justify replacing it when it runs so well and wasn't cheap.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by toast0 on Sunday November 09, 2025 @05:12PM (#45869713)
Sure, but if you run OpenWRT you can pick the radio firmware image. And you can trust Qualcomm cause they're from San Diego and made Eudora; their firmware won't have intentional security issues.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by deletedie on Sunday November 09, 2025 @10:09PM (#45871946)
And yet American products are the only ones we've ever had hard evidence on wrt intentional security issues in collaboration with US Intelligence.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by knappe on Sunday November 09, 2025 @10:19PM (#45872001)
Source for this claim?
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by overfeed on Monday November 10, 2025 @12:27AM (#45872737)
snowden-cisco-nsa-tao-interdiction.jpg
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by fulafel on Monday November 10, 2025 @02:36AM (#45873414)
Sometimes it's Swiss companies run by the CIA: https://www.npr.org/2020/03/05/812499752/uncovering-the-cias...
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by yard2010 on Monday November 10, 2025 @03:05AM (#45873602)
Comparing US intelligence to the other bad actor intelligence is wild - like comparing a paper cut to AIDS.

For now, at least.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by blitzar on Monday November 10, 2025 @06:22AM (#45874854)
The US intelligence apparatus is the GOAT of overthrowing foreign governments. They love it so much they even sometimes come back and overthrow the puppet regime they put in place a few years earlier (or just bomb the shit out of the civilians).

If it isnt AIDS then it is certainly a Cancer.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by m000 on Monday November 10, 2025 @06:56AM (#45875077)
I would first worry about Intel ME on my computer, and then about my router's firmware blob.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Sunspark on Monday November 10, 2025 @10:11AM (#45876717)
I run OpenWRT on my TP-Link and have been happy with it.

The radio sounds much like Intel's ME.

I think we all know there's a problem, but we don't have the power to do anything about it because what alternative is there? Ancient hardware?

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by __jochen__ on Wednesday November 12, 2025 @05:54AM (#45898652)
Do you trust the seller on AliExpress selling the OpenWRT One router? OpenWRT links directly to it (from https://openwrt.org/start): https://www.aliexpress.com/item/1005007795779282.html
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by daneel_w on Sunday November 09, 2025 @06:49PM (#45870512)
At some point it won't matter that you run OpenWRT on it. Obvious case in point: at a certain point it doesn't matter that you run Linux instead of Windows on your Intel PC, because it'll still be subjected to Intel ME, Intel AMT, Intel SGX and god knows what else.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by adrian_b on Sunday November 09, 2025 @08:38PM (#45871262)
On a PC, Intel ME and the like can be accessed remotely only through an Intel NIC, which can be avoided by using a PCIe Ethernet card from another manufacturer, if the motherboard does not have such an interface on it. Even many of the Intel Ethernet interfaces are supposed to have the remote access disabled from the factory, but you cannot be certain about this.

A more serious problem is caused by the laptops having Intel WiFi, which is difficult to replace. With such a laptop one would have to disconnect the internal antennas and use an external WiFi dongle, to be sure that remote control is not possible.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by ShroudedNight on Monday November 10, 2025 @12:05AM (#45872624)
At one point laptop wifi cards seemed to mostly be m.2 cards, which, while not usually trivial, were relatively feasible to swap out. Has that changed?
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by Firehawke on Monday November 10, 2025 @10:24AM (#45876849)
A lot of the time, they lock the slot to only their officially supported modules. Dell is rather notorious for doing that.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by jm4 on Sunday November 09, 2025 @07:57PM (#45870959)
I use their Omada stuff for my business. I own a coffee shop where I have a few devices I need online and I provide free WiFi to customers. I needed something where I could run multiple networks, segregate my own devices, support a large number of clients, automatically turn off free wifi outside of business hours, run a captive portal, reserve a minimum amount of bandwidth for my own devices and prioritize my own traffic, etc. It’s absolutely packed with features and costs less than the stuff I run at home. It was a fraction of the cost of the Meraki gear I was considering. The performance is great too.

I don’t know how much I trust TP Link, but my risk level is very low. There’s not much an attacker could do if they get on my network. None of my data is accessible on that network and everything important has MFA anyway. The most sensitive things are my POS and menu displays and they are just client devices connecting to the internet. I probably wouldn’t run this stuff in an environment where I had complex security requirements.

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by kjellsbells on Sunday November 09, 2025 @10:41PM (#45872161)
I don't think the attackers are after your credit card records as much as they are after using your network as one base amongst thousands of others to perform illicit compute, generate traffic to a victim network, etc. That is: the attack is outbound from you to the victim, not inbound to you as the victim (at least not beyond the initial beachhead).
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by msh on Monday November 10, 2025 @05:15AM (#45874438)
Omada does not really seem cheaper than unifi.
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by simoncion on Monday November 10, 2025 @10:11AM (#45876715)
Where does OP make the claim that Omada gear is cheaper than UniFi gear? Perhaps you skimmed the comment and confused "Meraki" for "UniFi"?
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by msh on Monday November 10, 2025 @02:30PM (#45879816)
OP does not make that claim. It just sounded like the choice was either tplink or something expensive like meraki.