built your own pfsense router yet this article might make you change your mind nine wi-fi routers used by millions were vulnerable to NUMBER_TOKEN flaws now this is a really super clickbait headline when you read this they actually just audited they did a top to bottom audit of nine different models of of router that have sold millions and millions of units and when they did the audit they found all kinds of flaws now all of the flaws or almost all of the flaws are not remotely exploitable it was just old versions of stuff old versions of the linux kernel old versions of busybox which is a sort of lightweight set of commands like ls and dir and command editing and some other stuff that's like a really super lightweight linux distro it's like a one binary that actually just does a bunch of different things and uh curl and some socket services and the web server and when you look at each one of those things there's a database of exploits people have already found so these security work researchers weren't looking for anything new they were just seeing that these companies had done their work to update the software components that they use on their products to be sure that they were current they were not they were not current to a horrifying degree because you know if it's you want it done right you got to do it yourself i guess was the lesson i love how it seems to be when you look at these pictures of all these routers it seems to be an arms race of who can attach the most antenna well that looks like the asus rog rapture is uh is winning there but uh NUMBER_TOKEN total vulnerabilities on that one NUMBER_TOKEN to NUMBER_TOKEN looks like edgelink tp-link synology edgemax d-link avm blah blah i will emphasize that again these vulnerabilities you need some kind of access in order to be able to use them it's not that they were wide open on the internet that certainly happened with routers before but these vulnerabilities could be exploited once you get access so once you've got access you can chain that together with one of these you know it's a smorgasbord it's a buffet it's like oh i can combine that exploit this is this feast yeah and then all of a sudden there's somebody minding crypto on your router or worse sending the data directly to verizon i can't think of anything worse than that so and again these things could be dealt with by the manufacturers if they just update their software that's all they got to do that's all they were checking for this was not even a real security audit again it was a security audit but like they weren't looking for things that were unknown they were looking for things that were known which is what makes this egregious it makes my blood pressure boil so yeah you need more emotional support soda
NO_SEGMENT_TOKEN