<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I guess we can only hope that they'll be enough open hardware such
as that banana pi that this mess won't be such a big blow. I think
it should be a specific criticism of all that choose to lock the
hardware down like that. They shouldn't be allowed to sell products
with known security vulnerabilities. That's criminal in my view.<br>
<br>
<br>
<br>
On 28/02/16 19:23, Philip Hands wrote:<br>
<blockquote cite="mid:877fhor655.fsf@whist.hands.com" type="cite">
<pre wrap="">Mike Brodbelt <a class="moz-txt-link-rfc2396E" href="mailto:mike@coruscant.org.uk"><mike@coruscant.org.uk></a> writes:
...
</pre>
<blockquote type="cite">
<pre wrap="">TP Link is generally decent, ...
</pre>
</blockquote>
<pre wrap="">I agree, but be aware that may be about to change.
New FCC/EU rules are coming in about wireless equipment being locked
down enough to stop people doing naughty things with their
transmissions, and as you can see from the posts with FCC in their
subjects here:
<a class="moz-txt-link-freetext" href="http://ml.ninux.org/pipermail/battlemesh/2016-February/thread.html#4379">http://ml.ninux.org/pipermail/battlemesh/2016-February/thread.html#4379</a>
TP-Link have reacted to that by making their US firmware
un-downgradeable -- which stops one from installing third party firmware.
This is not going to just be TP-Link, so is not a specific criticism of
them. I imagine that any manufacturers that sell cheap WiFi kit into
the US will go a similar route. The FCC apparently claim that they
didn't want this result, which just goes to show how limited their
imagination was when they set the rules.
I'd imagine that it will be quite a while before kit comes pre-loaded
with such firmware, but it's probably worth checking (for all
manufacturers) before you buy, and also worth being wary about
installing firmware upgrades from the manufacturer if you have any plans
to use third party firmware.
Of course, until they start trying to do a proper job, and lock the
firmware into the chip by blowing an efuse, you should still be able to
get your soldering iron out, and get access to the JTAG pads, but that's
a rather higher hurdle than installing OpenWRT via the web interface.
Cheers, Phil.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
GLLUG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:GLLUG@mailman.lug.org.uk">GLLUG@mailman.lug.org.uk</a>
<a class="moz-txt-link-freetext" href="https://mailman.lug.org.uk/mailman/listinfo/gllug">https://mailman.lug.org.uk/mailman/listinfo/gllug</a>
</pre>
</blockquote>
<br>
</body>
</html>