Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: 1 [2]

Author Topic: Bad security problems with Netgear routers’ sloppy code  (Read 4209 times)

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: Bad security problems with Netgear routers’ sloppy code
« Reply #15 on: February 01, 2017, 07:52:01 AM »

Hi

I would buy a Burakkucat modem like a shot.

I have been thinking about how to put my modems in metal boxes and ground them for ages, but haven't got it cracked yet, would need to have some ventilation yet keep rf out. If I could upgrade modems like that then it would give me further options. Spent a lot of time trying to google this but got lost and in any case don't know where to start. (Old thread somewhere.)

The Draytek Vigor goes part of the way, love them but just not performant enough for my particular situation, love the PPPoEoE -> PPPoA bridging and the full 1508 PPPoE MTU, just not as aggressive as I would like. Should really test a 130 again.

Not sure about the Netgear DMxxx series modems, reports of them running very hot indeed. Don't know about security.

It wouldn't make a lot of difference being grounded in a metal case.  The modem will have ground planes where required on the circuit board, and at high frequencies they are often just as effective as having something in a metal box, i.e. you don't need 100% coverage to be effective.  Anything particularly sensitive on the board will be in a screened can, and often that's just to stop interference to other devices and not to the benefit of the device in question.

Given also that an xDSL signal has traveled hundreds of metres being unscreened, screening the modem completely is really shutting the stable door after the horse as bolted :-)

I agree about pfSense, that is what I'm currently using on a home built mini-ITX board, working fantastic.

Regards

Phil
Logged

Weaver

  • Senior Kitizen
  • ******
  • Posts: 11459
  • Retd s/w dev; A&A; 4x7km ADSL2 lines; Firebrick
Re: Bad security problems with Netgear routers’ sloppy code
« Reply #16 on: February 01, 2017, 08:21:58 AM »

Good points as always from PhilipD. I believe now I come to think of it that we have discussed this before and my errors have been illustrated earlier. I would think though that modems’ circuit boards may vary in the quality of their design in this respect. Is that reasonable?

For the good of science anyway, I would love to see this confirmed as a null result, or otherwise. It would be difficult though as we are talking about possibly small performance differences seen very indirectly through a complex system and we would need to decide what aspects of behaviour in the speed vs reliability tradeoff we are going to examine and how to combine them. Anyone got a biscuit tin and some tools?
Logged

sevenlayermuddle

  • Helpful
  • Addicted Kitizen
  • *
  • Posts: 5369
Re: Bad security problems with Netgear routers’ sloppy code
« Reply #17 on: February 01, 2017, 09:04:24 AM »

I agree it would be very difficult to make draw any meaningful conclusions of screening in normal domestic scenario, with all the other spurious/random factors at play.  My money would still be no benefit but it would be am interesting test... if any benefit were obtained, I would certainly be interested in understanding it.

@sevenlayermuddle - I wonder if there is a device that can kill the power to a socket based on smoke detection and a temperature or infra-red alarm?

That's an interesting idea, I wonder if such a device exists?    I'd imagine it may sometimes be a bad idea to cut all the power when the alarm activates, e.g. lighting circuits as it is easier to run for the exit if the lights are still on.  But cutting power to selective sockets.... hmm, hard to see why not.  But we (at least I) are/am no expert, maybe there's downsides. 

Maybe there's a risk that average consumer would then try to plug too much equipment into that one socket (because it is 'protected'), thereby increasing the likelihood of the fire he wants to prevent. :-\
Logged

Weaver

  • Senior Kitizen
  • ******
  • Posts: 11459
  • Retd s/w dev; A&A; 4x7km ADSL2 lines; Firebrick
Re: Bad security problems with Netgear routers’ sloppy code
« Reply #18 on: February 01, 2017, 12:11:43 PM »

I wonder if some washing machines have a temperature sensor in them that detects when the motor is melting. That's what happened when our washing machine started belchin out toxic smoke when we lived in london, luckily Mrs Weaver was around at the time. My good friend in Yorkshire had some white-goods type appliance catch fire and wrecked the house with smoke damage. When our house in Skye had a kitchen fire over ten years ago it was possibly a central heating pump that melted, not sure. Perhaps I should patent yet another of my half-baked ideas.
Logged

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: Bad security problems with Netgear routers’ sloppy code
« Reply #19 on: February 01, 2017, 12:36:48 PM »

Hi

Good points as always from PhilipD. I believe now I come to think of it that we have discussed this before and my errors have been illustrated earlier. I would think though that modems’ circuit boards may vary in the quality of their design in this respect. Is that reasonable?

The quality definitely differs, some will be obviously worse and identifiable from sync speed and other statistics about the line and comparable if based on the same chipset, but then things like firmware versions of the modem code come into play.  I would think most are pretty close enough that other affects will mast differences, for example slight differences in the circuit design might favour one VDSL line over another.

Quote
Anyone got a biscuit tin and some tools?

Just place it in a biscuit tin and run the wires out the top and loosely replace the lid will do just as well.  This will shield the modem from any external interference, but of course it depends if that noise is entering via the plastic case into the circuit board directly, or being picked up by the power supply wire and telephone line, and so if the latter, it will make no difference.

It's also unlikely the circuit board is picking up external interference that is causing any negative results, as they have to be designed to be tolerant to external noise to comply with regulations, and also the circuit board will be designed with ground planes and the circuit tracks are always short and so would not really act as an antenna to many frequencies.

I have my modem surrounded by lots of kit all within a few feet, a pfSense box, a small fanless PC, a Philips Hue bridge, a Wi-Fi access point, a network switch and DECT cordless phone.  Underneath the modem shelf are all the power supplies for all the kit, yet I can turn everything off, shut the house mains power off and run the modem on it's own via a UPS, and SNR margin is unchanged, despite the modem being in a plastic case.  :)

Quote
I wonder if some washing machines have a temperature sensor in them that detects when the motor is melting. That's what happened when our washing machine started belchin out toxic smoke when we lived in london, luckily Mrs Weaver was around at the time. My good friend in Yorkshire had some white-goods type appliance catch fire and wrecked the house with smoke damage. When our house in Skye had a kitchen fire over ten years ago it was possibly a central heating pump that melted, not sure. Perhaps I should patent yet another of my half-baked ideas.

You can get thermal fuses http://uk.rs-online.com/web/c/fuses-sockets-circuit-breakers/fuses/non-resettable-thermal-fuses/ however very few electrical appliances have them. They have some problems, they are fairly costly, and need a manual process to install them as they can't be soldered in an oven with the rest of the components as that would fuse them, and they can't be soldered easily by hand as the heat would conduct up the leads and fuse them.  So it's a case of crimping them in some how.  Also they may not react quickly enough if the source of the heat isn't close by.

Regards

Phil
Logged
Pages: 1 [2]
 

anything