9 WiFi routers and 226 security problems

[madires]

Nine WiFi routers used by millions were vulnerable to 226 flaws: https://www.bleepingcomputer.com/news/security/nine-wifi-routers-used-by-millions-were-vulnerable-to-226-flaws/

Some issues are critical, many are overstated or possibly can't be exploited (a bit clickbaity). However, update if you have one of the affected routers.

[PKTKS]

Expected to happen...

I have dozens units....
Autoupdate is out of question..

Older chipsets just can not afford newer kernels.. and better crypto

While having focus on selling new gear obsoletes have no attention

This situation will olny gets worst w. iot

The investment in qualified people is negletable faced with invested in new gear and fancy interfaces

So expect to be a lot bad with cloud bots
 In near future of powerful SOM SOCs

Paul

[PKTKS]

ALAS...

although the older ones are hopeless...

Presently I try to buy devices based on (really) smart hardware...

https://openwrt.org/supported_devices

bricky shitty firmware no more.. 

Paul

[madires]

Yep, buying SOHO routers supported by OpenWrt is a good advise for long term usage and to reduce e-waste.

[PKTKS]

Yep, buying SOHO routers supported by OpenWrt is a good advise for long term usage and to reduce e-waste.

They are also order of magnitude more reliable and secure..

Paul

[magic]

OpenWRT will also get you maybe ten years out of it unless you select a high end machine.
It grows with bloat each year and drops support for systems which can't run it anymore.
Currently you need at least 8MB flash and 64MB RAM to run official builds.
Say goodbye to several devices popular back in the day.

[PKTKS]

OpenWRT will also get you maybe ten years out of it unless you select a high end machine.
It grows with bloat each year and drops support for systems which can't run it anymore.
Currently you need at least 8MB flash and 64MB RAM to run official builds.
Say goodbye to several devices popular back in the day.

The supported device list is very affordable..

Not to mention the FTP repository holds the old releases..
just in case you need an older firmware blob..

Got some time ago a bunch of TPLINK WR850 which are very well supported..

For some years now I always look the database to buy new stuff...

worthy.. better to have that kind of open and better alternative
Paul

[madires]

For most of the cheap routers the manufacturers offer updates just for about two years. They want you to buy a new one every two years. AVM (Fritzbox) provides updates for up to 10 years. If you go for a more professional model, like LANCOM, you'll get also about 10 years. Telco branded routers are usually supported for a few years. One of the worst manufacturers is DLink. Many security issues (often fixed only after media coverage), poor WiFi performance, hardware-wise at the low end (often half the flash and memory compared to other manufacturers' models in the same price class) and don't expect to get updates for more than two years, even for expensive models.