And ancient drones.So here in the good ol' US of A, we will not only have the dinosaur fossil fuel Goliaths, but routers a decade behind everyone else's. Just too much winning. Although, to be fair, once we pay the 10% Trump tax (the direct bribe) and the 50% tariff, we will be able to get the latest stuff, at double the cost.
Is there a chapter in Project 2025 about backdooring network access in American homes to stomp out disapproved topics of discussion or is this all about creating an avenue to allowing bribes for market access?
At least the way it’s phrased now, the default is that the only new routers allowed going forward without special permission are ones fully designed, developed, and built in the USA, basically on-shoring production from the drawing board to the product leaving the factory. Nice idea, but expensive and difficult to achieve.The most ridiculous part of this is that "manufacturing" them in the US doesn't remove any vulnerability at all. Do really think the mostly automated assembly line is physically sneaking in backdoors by hand? Like some guy is just sitting on the assembly line dropping bad bits into the bit bucket?
No seriously, I'm legitimately asking how do these people think software is made?
Putting all the made in China parts into the made in China case on some assembly line in the US doesn't change a god damn thing.
I want more secure networking hardware. This isn't that.
The government’s taking control of CBS was a freaking nuke shot over the bow of american journalism. The message was glaringly clear…Do as we say or face the consequences.Just skim over the news' sane washing sections. It's not healthy to listen to it. Literally any and all statements from anyone in this government now flagrant hate speech/gibberish/trolling/lies/market manipulation but it still makes up half of all news reporting for some damn reason instead of just telling us what they've done done did and why they did it.
There is no reason to repeat or report on what anyone in the Trump admin says unless it's 1. funny or 2. was their last words.
But also like, how is the government going to enforce that? I checked Asus' site and the firmware for an RT-BE86U (just picking one) router has the same SHA256 hash regardless of whether it's coming from the UK or the US version of the website. So what would the US government expect Asus to do, globally stop all updates to their product? I doubt that's going to happen. It may come as a shock to this administration but the US is not the only country where products are sold.Requiring security support to be cut off for for every router in the country will make the problem much worse. Someone that just replaced their router isn’t going to buy another one in two years because the government cut off support for the old one. There will be a 5 year window when the vast majority of routers will not be patched.
As soon as I can get one that’s reasonably priced, I’d be happy to pick one upTime to start selling single board computers with multiple networking interfaces.
As if anyone in this administration is smart enough to determine what's a critical infrastructure threat.
Spot the snuck premise..The United States must have secure and trusted routers. However, currently a majority of the routers in American homes and businesses are produced outside of the United States.
Me: winniethepooh-rule34.comSomeone please tell Congress that we have far bigger problems then the CCP finding out what porn sites I visit.
udr7 is nice but the wifi range isn't as good as a stand alone ap like u7 pro.I went the other way. I had a sprawling suburban house in the USA built with a UDMP, ethernet in the walls, APs in the ceiling and all that jazz... now I have a city apartment back in my home country and a UDR7. It works every bit as good as the UDMP did. Probably faster. It was definitely cheaper than the old kit. Hard to recommend the old discrete setups over the UDR7 now that it exists, unless you have BIG requirements for home networking lol.
I also only have one camera now looking out our street windows, really just for fun tho... In the USA I had several as a domewhat "teenager detterent" that was more necessary. I think the UDM7 is more limited on cameras since it has only an SD card.
Well, yes. It is the same legal arbitrage tactic used in manufacturing everywhere.Made in the US in the same way my PC was built in my office.
Yup. When I got FTTH at 2Gbps last fall, I had to find something that could actually handle that kind of bandwidth. BPI-R4 + OpenWRT has been excellent, although I did add a fan and a couple heatsinks to deal with the fact that SFP+ 10G RJ45 adapters run bloody hot. Didn't put on the optional (and apparently problematic) wifi card - it's just a straight router/firewall.
That’s exactly what I am talking about with Firewalla. It’s a dedicated firewall, similar class as UniFi stuff. They sell their own WAPs, but also can support other brands, such as Ubiquiti.Why not seperate your routing from your wireless and use real APs from the likes of Omada (TP-Link) or Ubiquiti? Also, if you want more coverage you want more APs, not bigger/faster/more powerful/louder APs.
Due to our condo layout and lack of in wall Ethernet, I’m more looking any free standing WAPs than mounted ones.Personally, I would highly recommend going modular. Because wireless APs don't usually need replacing unless you absolutely need the new WIFI features, and offloading it from an all-in-one box is better. Bonus that you can place the AP in a much better spot, and they usually look nice hanging from a ceiling (Ubiquiti APs are white, round and don't look out of place anymore than a smoke detector does).
Been tempted, but my wife works from home and it’s got to be something that is mostly set it and forget it, so I don’t have to fiddle too much.Rolling your own is increasingly the best option. It's not a terribly difficult proposition, either, if you have some know how. As you're on this site, I presume you've got a fair amount of skill here. pfSense or OPNsense on an older x86 machine gives you an incredible amount of power and customizablility, at the cost of size and power requirements. There's also less intense stuff, like OpenWrt. You can then get the WAPs that meet your needs.
They could region block access to the download site to us IP addresses, but that would be messy if the site has non-router related content. Technical people could use a non-US vpn to get illicit security patches. It’s incredibly stupid to limit updates when the FCC should be requiring routers to have 10 years of security updates.But also like, how is the government going to enforce that? I checked Asus' site and the firmware for an RT-BE86U (just picking one) router has the same SHA256 hash regardless of whether it's coming from the UK or the US version of the website. So what would the US government expect Asus to do, globally stop all updates to their product? I doubt that's going to happen. It may come as a shock to this administration but the US is not the only country where products are sold.
You'll have to smuggle them in from Canada
Edit :
But wouldn't they qualify as 'Enterprise' ?
It depends how you define "backdoor". If you're talking just about the ability to bypass or break the security, then yes, plenty of evidence.
If you're talking about intentionally inserting ways to bypass or break the security, then afaik nothing in recent history outside of the few times the FBI/NSA/CIA were caught opening up new routers (or worse) and switches in order to manually install their backdoors.
What would do a LOT more good would be if the government stepped in and mandated that all router manufacturers supported their products for a minimum of 5 years at no cost for security patches and that all identified security issues must also be patched within a reasonable time frame after being identified, along with requiring the manufacturers to have a process to identify security vulnerabilities both internally and to partner with organizations that do the same. If CISA hadn't been gutted, I would say make them the authority who tells manufacturers about security flaws that must legally be patched under this scheme.
In what way is it a "Nice idea"?At least the way it’s phrased now, the default is that the only new routers allowed going forward without special permission are ones fully designed, developed, and built in the USA, basically on-shoring production from the drawing board to the product leaving the factory. Nice idea, but expensive and difficult to achieve.
SOHO routers are pretty notorious for being full of vulnerabilities, rarely getting updates/losing support long before they're taken out of service, and by their nature they're pretty much always sitting right on the internet. They are legitimately a security nightmare.Aside from being another obvious shakedown, I have a feeling the only true security threat in play here is coming from inside the house.
And if they are pushing for back door access as part of any deal to get a waiver, you can bet that the major ISPs will be the first ones to cave (if they haven’t already), followed by any American company that wants to sell a router in the US.