US Government to BanTP-Link Devices - Live Hacking of a Chinese WiFi Router - Page 1
Forum section: electronics / general

author: JoeRoy
author_rank: Regular Contributor
timestamp: March 26, 2025, 01:12:55 am
content: Fun beginning at 12:12

author: Simmed
author_rank: Frequent Contributor
timestamp: March 26, 2025, 03:36:48 am
content: admin1234(as usual)

author: MrMobodies
author_rank: Super Contributor
timestamp: March 26, 2025, 03:41:43 am
content: Halycon was saying yesterday on IRC:Quote

author: magic
author_rank: Super Contributor
timestamp: March 26, 2025, 05:57:09 am
content: Quote from: Simmed on March 26, 2025, 03:36:48 amNot an issue unless you can login remotely with those credentials.The real problem are exploitable bugs in the web UI or other network services running on those devices and that's hardly unique to Chinese vendors, all consumer products are shit although being a Chinese consumer product certainly doesn't help. Hardware vendors treat software like a necessary evil and half-ass it to the maximum extent possible.Real men run OpenWRT on those things

author: SiliconWizard
author_rank: Super Contributor
timestamp: March 26, 2025, 02:52:28 pm
content: Agreed. I've installed OpenWrt on all consumer routers I've had.

author: pcprogrammer
author_rank: Super Contributor
timestamp: March 26, 2025, 03:13:48 pm
content: Who needs to hack routers when the bobo's leak sensitive data on signalhttps://www.theguardian.com/us-news/2025/mar/26/trump-signal-leak-new-messagesSorry for the politically tinted interrupt.

author: madires
author_rank: Super Contributor
timestamp: March 26, 2025, 04:03:33 pm
content: If you're looking for an inexpensive SOHO router look for models supported by OpenWrt (https://openwrt.org/toh/views/toh_available_16128,https://toh.openwrt.org/?view=normal). It's not just about long term support and updates, but also about features.We have several older TP-Link models running OpenWrt for over 10 years. They are still fine for VDSL throughput and as VoIP PBX. However, the oldest models with only 8 MB flash need to be replaced in the next few years (already using extroot).

author: radiolistener
author_rank: Super Contributor
timestamp: March 28, 2025, 01:55:32 am
content: Quote from: magic on March 26, 2025, 05:57:09 amMaybe that's the reason for ban. If they don't like that people using OpenWRT firmware, they may ban device for some fake reason, so that people don't have devices which can run OpenWRT.All governments are run by the devil, and he always uses tricks and deception to enslave people.

author: magic
author_rank: Super Contributor
timestamp: March 28, 2025, 05:30:19 am
content: I wouldn't be overthinking it, the actual reason for this and everything else is of course the trade war with China

author: krish2487
author_rank: Frequent Contributor
timestamp: March 28, 2025, 07:37:01 am
content: Quote from: radiolistener on March 28, 2025, 01:55:32 amTP LInk arent the only devices that can run OpenWRT you know..Also.. there are other options like Mikrotik routerOS, opnsense, pfsense, sonicwall and so on..why target only OpenWRT??

author: magic
author_rank: Super Contributor
timestamp: March 28, 2025, 07:50:42 am
content: They don't target OpenWRT but (probably) the cheapest manufacturer of routers that run OpenWRT.This increases competitiveness of American companies like Netgear or Linksys, which themselves can't really compete with OpenWRT

author: elektryk
author_rank: Regular Contributor
timestamp: March 28, 2025, 07:57:56 am
content: Quote from: SiliconWizard on March 26, 2025, 02:52:28 pmGood idea, unfortunately a lot of new routers are not supported.Another thing which I've noticed with Openwrt is worse WiFi performance with some radios, it's probably a driver issue.

author: SiliconWizard
author_rank: Super Contributor
timestamp: March 28, 2025, 02:43:26 pm
content: Quote from: elektryk on March 28, 2025, 07:57:56 amYes, that's something you need to look at when buying a new one. Check compatibility first.As to performance, it may make some difference. Yes vendor-provided firmware may provide some optimizations in exchange for your blood.

author: Halcyon
author_rank: Unknown
timestamp: March 30, 2025, 04:41:22 am
content: Quote from: magic on March 26, 2025, 05:57:09 amIt can be an issue if something else on your network is compromised and a threat actor pivots over to other devices and can simply login using default credentials. In a lot of compromises I've investigated in the past, quite often it's a PC on the network that gets popped first, usually due to someone installing malware either unwittingly or as part of a scam.

author: magic
author_rank: Super Contributor
timestamp: March 30, 2025, 05:37:29 am
content: The video mentions this being the password to the internal UART debug console, which is not an issue. And it's such a common password I'm not sure why he even bothered googling the hash.If the web UI uses it by default and the user doesn't change then yes, it can be a problem. That being said, a consumer router probably has LAN-exploitable bugs anyway

author: Bud
author_rank: Super Contributor
timestamp: March 30, 2025, 06:14:14 am
content: The entire video is a clickbait. There is nothing live in this "Live hacking". You must open the device enclosure to get access to the uart port. BS.