Critical vulnerabilities in numerous ASUS routers

Re:Critical vulnerabilities in numerous ASUS routers by mikevm on Tuesday July 16, 2013 @08:30AM (#6051394)

Given the recent NSA revelations, and the various posts discussing software and hardware backdoors, this vulnerability sent me into full-blown paranoia mode.

You can't trust web service providers, you can't trust your ISP, you can't trust your gov't, you can't trust hardware providers. Jesus H. Christ, is there anything left to trust?

I'm starting to feel that by the simple act of connecting a device to the Internet I'm already compromised which makes me feel dirty.

I guess Richard Stallman isn't so crazy after all for demanding open source hardware (well, he's actually demanding 'free' hardware). I know that DD-WRT is an open source router firmware, but I'm not sure whether high-end routers support it.

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by anon1385 on Tuesday July 16, 2013 @08:47AM (#6051463)

>You can't trust web service providers, you can't trust your ISP, you can't trust your gov't, you can't trust hardware providers.

You forgot your compilers: http://cm.bell-labs.com/who/ken/trust.html

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by lwhalen on Tuesday July 16, 2013 @09:16AM (#6051629)

I've got TomatoUSB on my Asus router. EXCEPTIONALLY powerful and stable firmware with great wireless coverage. This past weekend, pardon my humblebrag, I was able to segregate my network into separate VLANs for the home LAN, guest wireless, and a DMZ for my servers, with appropriate access ACLs (via iptables) for each. I feel very secure with this firmware, far moreso than with the Asus stock one that's for sure!

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by MrSouth on Tuesday July 16, 2013 @09:24AM (#6051677)

I'd recommend http://tomato.groov.pl/ running it on a RT-N66U, it's brilliant

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by bestham on Tuesday July 16, 2013 @10:51AM (#6052238)

Thinking about doing something similar, would you care to do a writeup? I'm deeply scared of iptables.

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by circa on Tuesday July 16, 2013 @09:30AM (#6051706)

I second Tomato. It has done me no wrong on my 4+ year old AP

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by emmelaich on Tuesday July 16, 2013 @10:16AM (#6051984)

Tomato is excellent.

I'll note that there is https://code.google.com/p/rt-n56u/ as well, though I know nothing about except what I read there.

I also heard that earlier ASUS routers had awful UIs and that they licensed Tomato from Polarcloud ... but I see no evidence of that (yet).

[ Parent | on HN ]

Re:Critical vulnerabilities in numerous ASUS routers by driverdan on Tuesday July 16, 2013 @10:53AM (#6052261)

There are vulnerabilities and weaknesses in everything. Your operating system, your apartment's gate lock, your car's firmware. If you worry about things that are outside of your control you'll never stop worrying. Focus on what you have control of. Put an open source firmware on your router.

[ Parent | on HN ]