TP-link is reportedly being investigated over national security concerns linked to vulnerabilities in its very popular routers.

  • dutchkimble@lemy.lol
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 hour ago

    law that prohibits attempts at monopolies

    Why hasn’t this law been used before for so many other things, like all cash burn tech startups such as Uber, etc? Genuine question not being sarcastic…

  • Gerudo@lemm.ee
    link
    fedilink
    English
    arrow-up
    11
    ·
    3 hours ago

    So who tf is left who makes good wireless routers? When I bought my tp-link it was top rated and recommended by everyone.

    • CaptPretentious@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 hours ago

      Yeah, most of those sites end up recommending the same brands over and over, which causes people to buy them and talk about them. I don’t want to say, a scam, but it feels… scummy.

      They never talk about other brands like Ubiquiti. Which isn’t a perfect brand either, but I’ve never seen it compared. Or even a low end Netgate. It’s always TP-Link, Asus, Netgear, Linksys, or D-Link… the same brands that have existed for the last 20 years offering crap. But Ubiquiti, Hawking, Belkin, etc. you basically never see.

      I just googled it. Top 3 sites were wired.com, pcmag.com, and reddit.com/r/HomeNetworking (with a top comment pointing to cnet.com and nytime.com). And if you guessed TP-Link was recommended no.1 on all of them, you’d be right. To me, with the absolute garbage reviews on all of them, and the stupidity small sample size, it feels like TP-Link just buys the reviews because customers will read the reviews and buy their garbage. There was a mattress company that did something very similar years ago. The deck is stacked against customers.

      And especially scummy, is TP-Link offers some cheaply made, highly marked up garbage that underperforms. They also are notorious for not delivering consistent updates to their routers. Maybe one or two updates, and they certainly don’t care if all the features don’t work. Just looked up one I bought from them before I wised up, the Archer C5400. 2 updates on a $200 router, that came highly recommended. Checked the v2, and also just 2 updates. I doubt it’ll ever see another.

      On top of their terrible support and pathetic hardware… they also moved to a cloud SaaS config model. They want you to sign up for an account and use TP-Link Tether. Here’s something written up 3 years ago on [reddit](https://www.reddit.com/r/hardware/comments/tbthjj/psa_newer_tplink_routers_send_all_your_web/}

      My general suggestion for most people who want something that just works and is easy to use… the Ubiquiti Dream router isn’t a bad option. It’s not the best, but if you don’t want to really get into how networking works, it’s a good option.

      • Gerudo@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        17 minutes ago

        I’m a techie, but I’m past the point where I want to tinker and mess with my stuff for hours or days to get it up and running. I’m sure the enterprise grade options are better, but I just want some plug and play option that at least allows me access to the more detailed stuff if needed. This looks like a solid recommend.

      • soul@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 hours ago

        “just”

        That’s not an option for most people. They’re either not savvy enough to manage everything at that level or don’t care to and they will likely spend more money doing it this way.

        • Entropywins@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          2 hours ago

          They actually made a great suggestion with mikrotik…granted I come from a networking background but those can be as simple as you want or as complex as you need. Their products are resilient and prices are a chefs kiss for what you get. Now if they had recommended just some juniper or cisco gear I’d agree with you but mikrotik makes great products at great prices.

          • sugar_in_your_tea@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            2 hours ago

            Exactly. They have three interface options:

            • Quick Set - similar to most residential routers
            • Web Fig (what I use) - access to more features, closer to OpenWRT
            • Terminal - what pros use

            If you only have one Ubiquiti AP, you can use their app (simple) and if you have more, you can use their cloud SW. I use their local SW because I like control, but it’s not for everyone (need to maintain a Mongo DB).

            Total cost is about $200 ($70-80 for a decent router, $100 for an AP), but you could probably go down to $150 if you’re okay with more basic gear.

            • soul@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              25 minutes ago

              And yet, grandpa or that weird uncle everyone has could just pop onto amazon and buy a normal tp-link router on sale right now for all of about $40 that has wifi built in.

              Anyone who’s tech-savvy should put themselves into the shoes of their non-tech-savvy parents or grandparents in a situation where they don’t have you around to help. That’s who the main audience is; not someone willing to go even slightly down into the stack with this idea.

        • sugar_in_your_tea@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 hour ago

          Why not? They have a super user-friendly “Quick Set” UI that’s literally one screen with:

          • WAN port and IP
          • LAN network (subnet)
          • VPN (optional)

          WiFi is a little more complicated since it’s a separate unit, but Ubiquitis instructions are extremely straightforward if you use their app (single AP only) or their cloud management service.

          I’m no IT pro, and I got it set up quickly. I’ve since added a bunch more to my setup and learned a ton, but basic setup is pretty approachable. If you know enough to understand the issues in the article, you’ll be 100% fine.

          • soul@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            29 minutes ago

            Now consider your average parent or grandparent and tell me that they’ll be 100% fine on their own and actually want to do this. Most would not. Often-times, the marketing itself is enough to scare these folks off of that kind of tech. They worry about things you probably don’t and don’t generally want to worry. Hell, even the fact that you’d have to purchase two completely separate items to get what you can currently purchase in a single unit is enough to not get many of them to do it.

  • AlexWIWA@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    4 hours ago

    Damn, maybe we should have some kind of privacy law that could have prevented this behavior from ever being allowed in the first place.

  • remer@lemmy.world
    link
    fedilink
    English
    arrow-up
    38
    ·
    9 hours ago

    The US government is just upset because it’s harder to place back doors in non-US hardware. It’s a US national security concern to NOT have US back doors in devices.

    • john89@lemmy.ca
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      8 hours ago

      That’s not all. The US government exists to look out for the interests of wealthy americans.

      Every dollar spent on a different nation is a dollar that could’ve been spent on them, in their eyes.

      American business owners know that China is competitive because they can provide better products at cheaper prices. Americans would need to invest in making their products better or lower prices to compete with China. Both result in lower profits for owners.

      This is why we will never stop seeing FUD against products that offer us a better deal than those looking to exploit us further. It’s more profitable to convince useful idiots to “buy american” than it is to actually sell them products worth buying at competitive prices.

      • atthecoast@feddit.nl
        link
        fedilink
        English
        arrow-up
        4
        ·
        5 hours ago

        This comment is suspicious to me. It’s been companies like Apple that have pioneered using Chinese labor to increase their profits. Moving jobs to the USA won’t help make them any richer. It makes economic sense but not strategic sense

        • sugar_in_your_tea@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 hours ago

          I don’t think it makes economic sense. Bringing production back here creates jobs, but we have low unemployment so we don’t really need more manufacturing jobs here.

          It makes sense for national security though.

  • Amoxtli@thelemmy.club
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    4 hours ago

    Joe Biden has turned out to be the most fascist president in recent memory. He even supports fascism abroad. When a president supports a country that blocks a certain denomination of religion, bans a whole language, and bans political parties, using Nazee propaganda as a recruitment marketing, while having no democracy. What can you say? Then he supports ethnic cleansing to make Lebensraum for another ethnic group. What a sick man this chap is and completely incompetent. Now he is banning things made by Chinese people, if that isn’t racist, I don’t know what is. The only thing he is exceptional at is getting others killed. Good riddance. One thing for sure, there will be no justice.

    • Myro@lemm.ee
      link
      fedilink
      English
      arrow-up
      10
      ·
      4 hours ago

      What the hell are you taking about? Get out of your bubble.

  • ben@lemmy.zip
    link
    fedilink
    English
    arrow-up
    29
    ·
    10 hours ago

    I’d personally hope they just force open sourcing their firmwares if they want to stay in the market. I really like my Omada stuff, ubiquiti is just a tough pill to swallow on price.

    • tty5@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      9 hours ago

      They (FCC) forced firmwares being signed so nobody can install their own on the off chance it unlocks TX power or frequencies not allowed by FCC.

      • john89@lemmy.ca
        link
        fedilink
        English
        arrow-up
        11
        ·
        8 hours ago

        Can’t say I’ve ever seen an example of signed firmware that didn’t exist to further exploit the working class.

        • sugar_in_your_tea@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 hours ago

          You’ve never used Linux?

          Signed firmware just means you can prove a given key was used to sign something. Most Linux distributions sign their packages so you know one of the trusted keys from the maintainers was used to sign the packages (and yes, this includes firmware), which prevents a man-in-the-middle from modifying packages.

          The only problem I have with signed firmware is if there’s no way to change the acceptable keys. Signing itself is an important security feature, its only problematic if the user can’t upload their own signed packages.

      • pirat@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        7 hours ago

        I recently bought their Flint 2 (GL-MT6000) based on multiple recommendations online when looking for a router that supports OpenWRT. That’s preinstalled, with AdGuard Home and WireGuard VPN on top of it. I’m looking forward to set it up and play around with it.

        What do you exactly mean when you describe their approach in software as Android-like? That it’s easy to install services in OpenWRT?

  • NegativeLookBehind@lemmy.world
    link
    fedilink
    English
    arrow-up
    84
    ·
    edit-2
    11 hours ago

    We have this really great approach to security where we allow the adversary to infiltrate a huge portion of our infrastructure for years and at many different levels, and then we say “hm, maybe we shouldn’t be allowing this?”

    • BMTea@lemmy.world
      link
      fedilink
      English
      arrow-up
      36
      ·
      11 hours ago

      Almost like it has less to do with security and more to do with securitization of economic competition.

    • LifeLemons@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 hours ago

      Well its just natural for coubtries to do this at this point when they dont like each other

      In an off topic, I often prefer a open hardware router like raspberry pi router as it gives me control! For me it’s safer to use as documentation is open like pfsense and openwrt.

      • Avieshek@lemmy.worldOP
        link
        fedilink
        English
        arrow-up
        3
        ·
        10 hours ago

        I don’t understand why doesn’t Raspberry Pi make a router when they’ve ideas like the 500 🤦🏻‍♂️

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          English
          arrow-up
          4
          ·
          9 hours ago

          There’s already OpenWrt for Pi. All you need is to add a switch or a USB ethernet adapter.

  • frankgrimeszz@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    ·
    12 hours ago

    Running OpenWRT is generally a good idea. I’m not gonna lie and say it’s easy to setup. But it’s worth it.

  • Erasmus@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    ·
    11 hours ago

    Someone in the comment section posted a good question. Which specific routers that TP-Link makes are the issue?

    Is it all routers that they make or is this just because they are selling inexpensive routers that have become a large part of the US market?

    Does someone have an article that isn’t biased one way or the other that gives a list of effected routers ?

    • humble peat digger@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      3 hours ago

      They don’t care. They want to ban TP-Link as a company, routers are just an excuse.

      This is the same people that keep blocking US gdpr legislation, so we know for a fact they don’t care about us, they just care about not being able to spy themselves.

    • Buelldozer@lemmy.today
      link
      fedilink
      English
      arrow-up
      4
      ·
      5 hours ago

      Which specific routers that TP-Link makes are the issue?

      They are presumably talking about CovertNetwork-1658 and the reason there’s no list of routers is because no one has publicly described the vulnerability that is being leveraged.

      My guess is that the vulnerability is present on most of their routers. I’m basing that opinion on the fact that previous CVEs issues against TP-LINK have impacted their most popular product lines like Archer and Deco.

      It’s possible that this is related to CVE-2024-21833 which was open in January of 2024, update in July of 2024, then updated again in late November of 2024.

    • technocrit@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      11 hours ago

      Does someone have an article that isn’t biased one way or the other

      We’re literally inside an imperial core.

      that gives a list of effected routers ?

      If there was a list of effected routers, TP-Link would most likely have patched them.

    • KoalaUnknown@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      11 hours ago

      Apple has been slowly shifting production to India for years now, and the software is made domestically.

      • disguy_ovahea@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        6 hours ago

        More importantly, the hardware is designed and inspected by Apple’s engineers. Security vulnerabilities would be Apple’s failure regardless of the origin of the parts.