Re:Belkin Explains Why Its Routers Stopped Working
by staunch on Wednesday October 08, 2014 @08:26PM
(#8430172)
#1 and #3 are not even refutations and #2 you didn't even understand. You're absolutely wrong that this isn't a security issue. The simple proof is that no secure network would ever allow a device to call home like this.
Maybe you think that because it's common it's not a problem. That's not how security works.
1. This is true, but most routers check for firmware updates anyway, so there you go. Not to mention online warranty registrations, etc. which would get you into their DB anyway.
2. Unlikely, unless you have a RCE bug in your DNS implementation, in which case the router is toast without the DNS querying.
3. One query is not "traffic". It is pretty easy to distinguish between one query on boot and constant communication. Again, it is only relevant if you already have malware in your router.