Kitz Forum

Internet => General Internet => Topic started by: parkdale on November 22, 2018, 10:30:08 AM

Title: Router Security
Post by: parkdale on November 22, 2018, 10:30:08 AM

Has any one seen this snippet published in El Reg?

https://www.theregister.co.uk/2018/11/20/germany_versus_openwrt_ccc/ 

Title: Re: Router Security
Post by: kitz on November 24, 2018, 11:57:55 AM

Some wise suggestions in there that should be included as standard.

Quite like this one  "User-controlled firmware updates, with an option for push-updates".   I should imagine there is a fair sized population who buy a router from the likes of PCWorld and never update the firmware, so there will always be routers out there with unpatched security updates.   Allowing push updates could be an excellent solution for those who never check for updates and/or just don't know how to update f/w.

Title: Re: Router Security
Post by: Weaver on November 24, 2018, 12:07:14 PM

My router gets push software upgrades, but you can turn that off. I’ve just changed the configuration though so that it will only install sw and and reboot in the middle if the night, not at any old time, since the reboot is disruptive. At least it only takes five seconds, maybe less, to reboot.

In contrast, my ZyXEL WAPs take over three minutes to reboot, and my ZyXEL VMG 1312-B10As take over minute iirc.