Slashdot Mirror


Cisco Pushing 'Cloud Connect' Router Firmware, Allows Web History Tracking

Myrv writes "Reports have started popping up that Cisco is pushing out and automatically (without permission) installing their new Cloud Connect firmware on consumer routers. The new firmware removes the user's ability to login and administer the router locally. You now must configure the router using Cisco's Cloud connect service. If that wasn't bad enough, the fine print for this new service allows Cisco to track your complete internet history. Currently, it appears the only way to disable the Cloud Connect service is to unplug your router from the internet."

351 comments

  1. Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 5, Funny

    1. Unplug router
    2. Open garbage can lid
    3. Insert router
    4. Close garbage can lid
    5. Purchase new router

    That shit? Fuck it.

    1. Re:Upgrade Instructions for Cisco Clients by alphatel · · Score: 4, Informative

      or Tomato, or DD wrt

      --
      When the foot seeks the place of the head, the line is crossed. Know your place. Keep your place. Be a shoe.
    2. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 3, Informative

      Not supported (yet). Last time I checked, the original Tomato has not produced any further updates or additional supported routers. It's really about TomatoUSB (which is also somewhat outdated) and all the forks (Vics-a-geek, Shibby, Openlinksys, etc) that came from that tree. I've been running those firmware almost immediately out of the box as soon as the router model was supported.

    3. Re:Upgrade Instructions for Cisco Clients by Local+ID10T · · Score: 5, Informative

      The option to install firmware yourself is greyed out on routers after the "upgrade". I have read that if you call Cisco and complain they will allow you to roll back to a previous firmware (without Cloud Connect) at which point you can manually upgrade to non-Cisco firmware.

      --
      "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
    4. Re:Upgrade Instructions for Cisco Clients by Jahf · · Score: 5, Informative

      At least 3 of the routers affected (EA3500, EA4500, E4200v2) are using Marvell chipsets. Not sure about the EA2700. Which means that, unless someone decides to add chipset support, DD-WRT doesn't run on these routers.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    5. Re:Upgrade Instructions for Cisco Clients by Megane · · Score: 5, Informative

      What I read in the linked thread yesterday (when this was still in firehose) is that if you disconnect from the internet, the manual upgrade option becomes available. Then you "upgrade" to an earlier version of the firmware, remembering to then uncheck the "automatic updates" option.

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    6. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 1

      DD WRT is closed source, and parts of it (like qos) are non functional if you do not pay for it. Tomato and variants are open source.

    7. Re:Upgrade Instructions for Cisco Clients by BronsCon · · Score: 1

      Since when do you have to pay for QOS on DD-WRT?

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    8. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      Buy Force10 : )

    9. Re:Upgrade Instructions for Cisco Clients by Gordo_1 · · Score: 3, Informative

      Yup. Currently running Shibby's latest (095) All-In-One build on my Cisco E4200v1. It's a good N router and Shibby's firmware is super stable with support for IPv6, USB & VPN among other things.

      Check it out:
      http://tomato.groov.pl/

    10. Re:Upgrade Instructions for Cisco Clients by PopeRatzo · · Score: 1

      Yup. Currently running Shibby's latest (095) All-In-One build on my Cisco E4200v1.

      Thank you for the tip. I've got an E4200, and will try this.

      --
      You are welcome on my lawn.
    11. Re:Upgrade Instructions for Cisco Clients by epyT-R · · Score: 4, Insightful

      Ideally we shouldn't support companies who do this even if their hardware is reflashable.

    12. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      I had a Linksys router in the past and found I preferred my old USR5461 router to it for the fact that it was rock stable and went without my doing anything to it for over a year at a time. I did not have that same experience with the Linksys piece and replaced it with the USR and added a TP-LINK TL-WR841ND router as well so I have two running for various reasons and both are stable and do not try to force me to accept an update automatically. In fact, neither even offer the option.

      So, I have an older 54 model Linksys router in storage and I guess it might be in demand now since it is of the generation that could run a new os with flashing...

      Cheers.

    13. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      Wow, CISCO banned me from their site.

      I think my post was number 78. I asked if they enabled this cloud service in order to stop open source software, and that what they are doing is probably just a data mining operation imposed on t heir paying customers. I said they're nuts for doing it.

      Now when I go to check on the topicI get this:
      We're sorry, but you have been banned from using this site.
      Return to my original page

      I didn't post anything rude, or ban worthy. Just a valid opinion and statement. Guess I must have hit the nail too close on the head for CISCO's liking.

    14. Re:Upgrade Instructions for Cisco Clients by Gordo_1 · · Score: 1

      I dunno... As long as I have an out, if other people don't know or don't care about their security/privacy enough to protect it, I don't feel any special obligation to punish a company that exploits their ignorance.

    15. Re:Upgrade Instructions for Cisco Clients by Gordo_1 · · Score: 2
    16. Re:Upgrade Instructions for Cisco Clients by epyT-R · · Score: 1

      perhaps, but if the masses are ignorant, the clueful must also submit to the LCD assumption. In this case, if companies are encouraged to make products with firmware like this, it will become impossible to defend personal security once they become the norm.

    17. Re:Upgrade Instructions for Cisco Clients by ThatsMyNick · · Score: 2

      Buy it used.

    18. Re:Upgrade Instructions for Cisco Clients by UncleTogie · · Score: 2

      As long as I have an out, if other people don't know or don't care about their security/privacy enough to protect it, I don't feel any special obligation to punish a company that exploits their ignorance.

      ....aaaand that's why we have Fox News...

      --
      Don't tell me to get a life. I'm a gamer; I have LOTS of lives!
    19. Re:Upgrade Instructions for Cisco Clients by ron_ivi · · Score: 2

      Ideally we shouldn't support companies who do this even if their hardware is reflashable.

      I'm torn.

      We *SHOULD* support them for selling hardware where you can install whatever software you like.

      IMHO that's far more important than whatever bad decsisions they make with the bundled software.

    20. Re:Upgrade Instructions for Cisco Clients by mysidia · · Score: 1

      Last I checked Tomato and DD wrt weren't capable of running on my Cisco 7204VXR

      But then again, as far as I am aware, IOS 12.x has no auto-update features, either.

    21. Re:Upgrade Instructions for Cisco Clients by wvmarle · · Score: 1

      I'm keeping this in mind for when my almost a decade old but still functional wifi router stops working. The next one is not going to be a Cisco. No idea what it will be, but not Cisco. Just something else.

    22. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      So the E4200v1 can take the AIO build fine? I'm having a hard time finding any information, but I know some routers don't have enough flash in them for the AIO.

    23. Re:Upgrade Instructions for Cisco Clients by Kalriath · · Score: 1

      Even then, they aren't upgrading IOS devices to Cloud Crap anyway - that's for consumer shit. If you're running IOS, there's an expectation that you're a business/enterprise customer who tolerate all that shit.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    24. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      1. Unplug router
      2. Open garbage can lid
      3. Insert router
      4. Close garbage can lid
      5. Purchase new router

      That shit? Fuck it.

      6. ????
      7. PROFIT!!!!

    25. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      The problem here is that what is really being discussed is the Linksys line which everyone likes to call Cisco because Cisco puts their name on it. Which then makes all these smurfs think they are now network engineers. Who cares about these garbage home routers. You don't like it you can choose from 5000 others.

    26. Re:Upgrade Instructions for Cisco Clients by The+Archon+V2.0 · · Score: 1

      I'm torn. We *SHOULD* support them for selling hardware where you can install whatever software you like. IMHO that's far more important than whatever bad decsisions they make with the bundled software.

      Problem is, that risks getting into a debate about how nice the flower they shove up your ass has to be rather than stating you don't want ANYTHING shoved up there. Compromise is nice, how much can one compromise with a surprise firmware update hijack plus EULA addition that reserves the right to spy on everything you do?

    27. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      I am saying - tellus@cisco.com

    28. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      Just dont buy more from Cisco.

    29. Re:Upgrade Instructions for Cisco Clients by Nemesisghost · · Score: 1

      EA2700 is included. It's the one I have & I got hosed by this.

    30. Re:Upgrade Instructions for Cisco Clients by Raved+Thrad · · Score: 1

      From reading the article, apparently even deselecting automatic updates isn't enough, because part of the constantly-updating TOS reads:

      “In some cases, in order to provide an optimal experience on your home network, some updates may still be automatically applied, regardless of the auto-update setting.”

      --
      Life, ultimately, boils down to the Four Fs: Fighting, Fleeing, Feeding, and Mating.
    31. Re:Upgrade Instructions for Cisco Clients by Anonymous Coward · · Score: 0

      DONE. Went with Netgear, and trashed a perfectly good (but can't be trusted) Linksys.

  2. Last post! by fotoguzzi · · Score: 5, Funny

    Have to disconnect my router.

    --
    Their they're doing there hair.
    1. Re:Last post! by Anonymous Coward · · Score: 4, Funny

      wait! don't leave just yet, remember to run out and get a non linksys router

      oh damn he already left

  3. wow by v1 · · Score: 4, Insightful

    that's all I can say really. This sounds worse than sony's disabling of features in a firmware update. Only this one you can't just not do. (and deal with the consequences of not being up to date)

    But I bet this one gets sufficient backlash to require them to backpedal. Significantly altering the behavior of a purchased product by remote control, without opt-out. Arguably illegal?

    --
    I work for the Department of Redundancy Department.
    1. Re:wow by biodata · · Score: 2

      UK has some law called something like the Misuse of Computers Act that might apply.

      --
      Korma: Good
    2. Re:wow by SJHillman · · Score: 1

      Maybe this is Cisco's way of pushing alternative firmwares (DD-WRT, Tomato, etc). It's actually a cleverly disguised advertisement for open source alternatives.

    3. Re:wow by somersault · · Score: 2

      It's incredibly dumb. Even without the whole spying on your history thing, what happens if you misconfigure your router? How do they expect you to fix the configuration when you lose your internet connection? Not everyone has a smartphone.

      --
      which is totally what she said
    4. Re:wow by Anonymous Coward · · Score: 0

      Some of the early reports seem to indicate you can still log in to it if it is not online.

    5. Re:wow by Anonymous Coward · · Score: 0

      Does that means you can no longer check router logs/settings if the interweb connection died on you!
      "Just take my money"(TM) now!

      captcha for the post: sucked... LOL how appropriate!

    6. Re:wow by torkus · · Score: 5, Insightful

      Not to mention I didn't even click-through an EULA on that router that could get them an idea they have some kind of "right".

      It's MY router, I bought it. and it's not some quasi-goods digital product. This is a physical item. You want to back-door my router and install crippled firmware? I'll sign up with the class action if this is the case.

      I don't want anyone *at all* to be able to update my router from the internet (or WiFi for that matter). In fact, almost every router has remote (i.e. internet) side administration disabled for obvious security reasons. Now they include the word 'cloud' and it's OK?

      Hell, this isn't even cloud architecture anyway. It's just a web-based (pseudo-remote) remote administration tool. You'd think Cisco of all people would understand that.

      Then I see things like this and can't help but smile at the "progress" :
      Re: EA4500: weird login screen; can't login
      Options
      06-26-2012 05:10 PM

      I found a hole... Dynamic DNS password is displayed in plain text

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    7. Re:wow by SJHillman · · Score: 1

      As the last line of the summary mentions, if you disconnect from the Internet then you'll be able to log in locally. However, one of the posts in the link in the summary says that many of the features are disabled when logging in that way.

    8. Re:wow by Quakeulf · · Score: 4, Insightful

      No, they will only want in on the data and let this slide.

    9. Re:wow by Serif · · Score: 2

      Ah, but you're forgetting that Cisco have lots of $$$ to afford expensive lawyers.

      Wait. You didn't actually think that that law was supposed to apply to Mega Corps did you?

    10. Re:wow by TheGratefulNet · · Score: 5, Interesting

      good comment from a user post:


      No persuasian needed. Seriously. The engineer was great and you could TELL he was sincerely apologetic about the issues. I asked him about the whole incident, and he basically hinted at a little war going on within Cisco and the final decision to go ahead with updating people like this was upper management, where the lower pay grades tried hard and fought against the way they did things.

      The Engineer simply sent me to a link, the one that is already listed in these threads and gave me instructions on how to revert back to the older firmware with the caveat (and he was apologetic about it - again I could tell he really was sincere) that the old firmware cant be supported. He then proceeded to give me his email address (which I wont give out, sorry) and told me to feel free to contact him with any issues I have. Very cool, very professional, and sincerely apologetic.

      I asked if they were being inundated with calls, his simple reply was a sigh and "you have no idea......"

      from a user called 'markdr'.

      this pretty much sums up the situation, I would guess. the regular guys who write code were not for this but some idiot mgr upstream pushed for it.

      I feel sorry for the real engineers there who are forced to do bullshit tasks that they KNOW will piss off their users. I hate this side of software eng. evilness of top level mgrs usually end up winning ;(

      --

      --
      "It is now safe to switch off your computer."
    11. Re:wow by mrchaotica · · Score: 1

      It's MY router, I bought it. and it's not some quasi-goods digital product. This is a physical item. You want to back-door my router and install crippled firmware? I'll sign up with the class action if this is the case.

      This should not be a class-action (civil) issue; this should be a hacking and data theft (criminal) issue with the people responsible ending up in Federal prison!

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    12. Re:wow by Anonymous Coward · · Score: 0

      People will still need restitution, and the best remedy for that is a class-action.

    13. Re:wow by girlintraining · · Score: 5, Funny

      It's MY router, I bought it. and it's not some quasi-goods digital product. This is a physical item.

      The firmware remains the property of the company. It's software. Therefore, you don't own it. Of course, without firmware, it's useless, but I doubt you'll get many judges to sign on with the idea that you own the firmware too. Thank you copyright law.

      I'll sign up with the class action if this is the case.

      Your terms of service have been patched. That option was removed by v43 of SCOTUS. It was a mandatory update to legal.sys. You'll have to use the legacy mode 'civil_action' after setting has_lawyer to true and extra_money to lots. Be aware, the legacy mode is really buggy; It produces different results depending on the locale set during install. Enabling it also occasionally causes the processor and memory to jump to 100% utilization and the I/O is doggedly slow.

      Hell, this isn't even cloud architecture anyway. It's just a web-based (pseudo-remote) remote administration tool. You'd think Cisco of all people would understand that.

      Cisco engineers do. Cisco marketing does not. Cisco marketing sees the value of having a complete web browsing history of a substantial cross-section of the world, and has chosen to leverage that to increase profits post-SCOTUS patch, and since the CEO and the board signed a legally binding agreement to maximize profits, the engineers had no choice. You should welcome your capitalist overlords, and as a IT worker, you can help increase their efficiency as they enslave others in their salt mines.

      --
      #fuckbeta #iamslashdot #dicemustdie
    14. Re:wow by Anonymous Coward · · Score: 1

      Look, son, we don't need any of your "rational thinking", "measured concern", and "actually emailing someone behind this" nonsense! We've got angry, rabid frothing to do! Come on, man, get with the picture! One person posts something into the echo chamber, we get the delicious, delicious taste of our own bile rising up our throats as our anger increases, and then it becomes a global panic and class-action lawsuit after a whole day or two! Geez, what's WRONG with you?

    15. Re:wow by Anonymous Coward · · Score: 0

      What do you think the term "Cloud" means? It just means you keep your sh*t on the internet on someone else server.

    16. Re:wow by Anonymous Coward · · Score: 1

      So what did we actually buy then? The free market becomes totally useless in this case - I can't make an informed purchase decision if the vendor is allowed to change the rules of the game *after* I've signed my name and owners of this router should be within their rights to send back the hardware for a full refund since they just changed the contract. This argument is always going to be unbalanced though - if I say I'm free to terminate my contract for a refund *any time* you change the firmware then they'll blatantly fail to update the firmware *ever*. If I say you can change the firmware at any time and I have no choice but to accept then jackassery like this happens and I get shafted. The courts are going to have to decide.

      This whole situation is the reason that open source exists and must continue to exist, because if we allow them an all-you-can-eat buffet via the firmware then they'll quite happily take everything they can and never tell you about it. Someday they'll decide it's "ok" to skim your bank logins and take a few dollars from your checking account because they're offering you a service, right?

    17. Re:wow by Anonymous Coward · · Score: 0

      and how do you propose imprisoning a corporation?


      --
      posting ac due to mod points

    18. Re:wow by nurb432 · · Score: 1

      Most people wont even notice. This is consumer grade stuff we are talking about. For the "plug it in and it just works" crowd.

      If a few techies get burnt, no great loss for them. Its nice to think that you matter in the world, but really you don't.

      --
      ---- Booth was a patriot ----
    19. Re:wow by slashCL · · Score: 1

      Downgrade procedure posted on Cisco support forum. http://homecommunity.cisco.com/t5/Wireless-Routers/Smart-Wi-Fi-Routers-How-to-downgrade-your-firmware-back-to/td-p/538010 Firmware now available on the support site.

    20. Re:wow by v1 · · Score: 1

      Most people wont even notice

      Not until they smell money. Easy money brings people on board pretty quickly.

      --
      I work for the Department of Redundancy Department.
    21. Re:wow by Anonymous Coward · · Score: 0

      I hope changing the terms of service significantly is disallowed in other countries.

      Monitoring and storing information out of the country about someone is already illegal in most countries. Unless the government has a sharing (five eyes) arrangement.

    22. Re:wow by msauve · · Score: 1

      Cisco is a California corporation. Criminal Liability of a Corporate Officer or Agent

      With an embedded firmware device, the end use has no need to agree to any "shrink wrap" license or ToS prior to use. Whatever firmware is provided is used, and "copied" into RAM, under Fair Use - that's a normal and expected part of operation, the purchase would be otherwise worthless. Perhaps, an agreement could be required when deliberately downloading an upgrade, but that is not the case here.

      Therefore, the user might never have agreed to allow Cisco to take control of their purchased device, and change it's operating behavior. Cisco was negligent in making "automatic upgrades" a default. They should, at a minimum, have made the default to be "off," and popped up a warning/permission agreement if the user turned it on.

      What they have essentially done is to ship a Trojan Horse, the result of which was criminal*.

      It hasn't been determined if the terms of their new unilateral contract are reality with the new firmware - but if they capture browsing behavior, they're also in violation of the ECPA, since the automatic download of new firmware would have required no authorization from the user. If they ship new product with firmware which does that, they'll still be criminals, because the user cannot be required to provide authorization for that as a condition of using the product.

      *"Whoever...knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer...the term âoedamageâ means any impairment to the integrity or availability of data, a program, a system, or information;..shall be punished..." - 18 USC 1030

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    23. Re:wow by Kalriath · · Score: 1

      It's disallowed up until the Executive Branch of the US Government wedges a non-negotiable clause into a Free Trade Agreement forcing the target country to implement laws allowing it.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    24. Re:wow by tricorn · · Score: 1

      It's MY router, I bought it. and it's not some quasi-goods digital product. This is a physical item.

      The firmware remains the property of the company. It's software. Therefore, you don't own it. Of course, without firmware, it's useless, but I doubt you'll get many judges to sign on with the idea that you own the firmware too. Thank you copyright law.

      No, but you do own a COPY of that firmware. You OWN it, just as you own a book. You don't own the software itself, just as you don't own the words in the book, but you own the copy.

      I don't see anywhere in copyright law that says they're allowed to change my hardware (which includes the specific configuration of atoms, electrons and protons that form the firmware) without permission. A lock company may own the patents on a lock, but that doesn't give them the right to sneak in some day and modify your lock, perhaps re-keying it to allow for a master key that they control.

  4. Carriers? by Anonymous Coward · · Score: 0

    Does Verizon use Cisco routers?

    1. Re:Carriers? by Anonymous Coward · · Score: 0

      If they did, not anymore.

    2. Re:Carriers? by Jahf · · Score: 5, Informative

      This only affects a very small number (4) of the Linksys consumer routers and only the ones currently on the shelves. Not big Cisco routers, not Cisco SPVTG routers, not Cisco SMB routers and not even all Linksys routers.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    3. Re:Carriers? by schwit1 · · Score: 1

      Verizon uses the crappy Westell which has the cable connection and has to be on the front of your network. They too restrict what you can do in it.

    4. Re:Carriers? by symbolset · · Score: 5, Insightful

      Let me explain about trust...

      --
      Help stamp out iliturcy.
    5. Re:Carriers? by Anonymous Coward · · Score: 2, Insightful

      its called a test bed, if their scheme is successful, they push it to other devices. 4 years after all products are on the automatic scheme, they charge for upgrade subscriptions.

    6. Re:Carriers? by Anonymous Coward · · Score: 0

      Posting anonymous as I modded. This is a very different situation. In the case you describe it's Verizon router, it's just on your premises. In this article, it's anyone bought router.

    7. Re:Carriers? by Anonymous Coward · · Score: 0

      You IT lifers crack me up... Consumer NAT firewall != carrier router. Never has never would. Thats why they brand them under Linksys, so you dopes won't be so confused.

    8. Re:Carriers? by TheGratefulNet · · Score: 1

      the big routers already have spymode in pure hardware, so they don't NEED firmware updates to spy.

      (I only half kid. I think..)

      --

      --
      "It is now safe to switch off your computer."
    9. Re:Carriers? by Anonymous Coward · · Score: 0

      Thankfully it is trivial to bypass, and verizon will even help you do it if you get lucky when you make the phone call. I'm using Verizon with my own router and it's great.

    10. Re:Carriers? by DirkDaring · · Score: 1

      Ding ding ding this man gets it!

    11. Re:Carriers? by Anonymous Coward · · Score: 0

      But Verizon owns the wireless router. Cisco is doing this to privately owned equipment.

    12. Re:Carriers? by RealGene · · Score: 1

      Verizon FiOS uses ActionTec routers, which ship with remote access and auto firmware updates disabled.
      Verizon keeps an unblockable port in the ActionTec that allows them unfettered access to the router.

      --
      Mission: To provide products that consume time and energy as entertainingly as permitted by the laws of thermodynamics.
    13. Re:Carriers? by Anonymous Coward · · Score: 0

      Yes, he does - fortunately I'm betting this backfires in their faces *big time*, as an IT professional in a Fortune-10 company I can tell you that updates popping in "automatically" is verboten pretty much (just what we need is major production systems going down because some 'update' installed itself automatically, unknown to anyone, behind the scenes), and I always am sure at home things like windows update are always set to manual (prompt me its available, but doesn't download or install unless I take deliberate action to do so after reviewing the list of 'updates').

      This is a 'breach of trust' in my mind - it would have been one thing if they made this public long beforehand with a public announcement, so people could disable the updates beforehand, etc... but this reeks of trying to 'sneak in' something on unsuspecting users. Whether they 'denounce' this policy or not for the future, I will never recommend a Cisco product to anyone in the future.

    14. Re:Carriers? by Anonymous Coward · · Score: 0

      No, you're not. There are specific virtual shadow ports that route information out of streams transparently, to... other ports. With filers, lots of RAM, and analytics.

    15. Re:Carriers? by Anonymous Coward · · Score: 0

      B%%-%%%T

      This "update" disables functionality in other routers as well.

      This "update" is a clear signal: If you use CISCO gear, they will sniff your network.

      CISCO is dead to me.

  5. FU No Thanks by Hangtime · · Score: 5, Informative

    http://www.cisco.com/web/siteassets/legal/connect_cloud_supp.html

    I especially like how they get to keep your Internet history. Why do you think this is a good idea Cisco?

    Your new Cloud Connect contract ...When you use the Service, we may keep track of certain information related to your use of the Service, including but not limited to the status and health of your network and networked products; which apps relating to the Service you are using; which features you are using within the Service infrastructure; network traffic (e.g., megabytes per hour); Internet history; how frequently you encounter errors on the Service system and other related information ("Other Information"). We use this Other Information to help us quickly and efficiently respond to inquiries and requests, and to enhance or administer our overall Service for our customers. We may also use this Other Information for traffic analysis (for example, determining when the most customers are using the Service) and to determine which features within the Service are most or least effective or useful to you. In addition, we may periodically transmit system information to our servers in order to optimize your overall experience with the Service. We may share aggregated and anonymous user experience information with service providers, contractors or other third parties to assist us with improving the Service and user experience, but any shared information will be consistent with Cisco's overall Privacy Statement and will not identify you personally in any way....

    1. Re:FU No Thanks by torkus · · Score: 3, Interesting

      Let me get this straight. They install an "update" on my router that lets them monitor my internet usage - all without my consent?

      I'd say it couldn't possibly be that bad...but the I look to what FB does and shake my head. I like their routers, but there is NO CHANCE whatsoever that I will give a 3rd party my entire house's internet browsing history. You couldn't get me to do that if you gave me a free router AND free internet.

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    2. Re:FU No Thanks by Local+ID10T · · Score: 5, Informative

      Dont forget section 4 of the Terms of Sevice!

      4. Your Responsibilities as a Cisco Connect Cloud User

      You are responsible for any data that is sent or received by you and/or any other party in connection with your access to and/or use of the Service used in connection with your account. You agree that Cisco will not be liable to you or any others for any loss or damages due to your use of the Service.

      As a condition of your use of the Service, you agree that your use of the Service in accordance with the terms and conditions of this Agreement is permitted under and will comply with the applicable laws of the country where you use the Service. You agree not to use or permit the use of the Service: (i) to invade another's privacy; (ii) for obscene, pornographic, or offensive purposes; (iii) to infringe another's rights, including but not limited to any intellectual property rights; (iv) to upload, email or otherwise transmit or make available any unsolicited or unauthorized advertising, promotional materials, spam, junk mail or any other form of solicitation; (v) to transmit or otherwise make available any code or virus, or perform any activity, that could harm or interfere with any device, software, network or service (including this Service); or (vi) to violate, or encourage any conduct that would violate any applicable law or regulation or give rise to civil or criminal liability.

      While we are not responsible for any content or data that you choose to access or otherwise use in connection with the Service, we reserve the right to take such action as we (i) deem necessary or (ii) are otherwise required to take by a third party or court of competent jurisdiction, in each case in relation to your access or use or misuse of such content or data. Such action may include, without limitation, discontinuing your use of the Service immediately without prior notice to you, and without refund or compensation to you.

      You will indemnify and hold us and Cisco Systems Inc. and its affiliates harmless against any claims, losses or damages arising from any threatened, repudiatory or actual breach by you of the covenants set out in this Section.

      As part of the Service, You will be required to create a password that will enable You to use the Service. Your email address and password will be used to validate Your identity in order to access the Service. When You choose a password, choose a unique combination of letters and numbers unrelated to Your or someone else’s identity or to any information that is publicly available or that may be needed by us to provide the Service to You or to others. If you share information related to the Service with others or allow others to access the Service using Your email address and password, you have no expectation of privacy or confidentiality in the personal information you may intentionally or unintentionally disclose. Therefore, please avoid giving access to these materials to others. You agree to notify Cisco immediately of any unauthorized use of your account or password, or any other breach of security.

      --
      "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
    3. Re:FU No Thanks by Anonymous Coward · · Score: 1

      Alright, yeah, this is a rather dastardly move on Cisco's part, and there's no denying the terms of service of this new firmware are a bit too Big Brother.

      That being said, it looks like:

      A) This only happens automatically if you have the option for automatic firmware updating checked in your router's config. You lose your geek card & status if you left this option on. Not that I'm saying the average home user (who almost certainly wouldn't know how/why to change this option) deserves to have his/her data snooped, but as a techie, you should know better.
      B) You CAN roll this update back - download the previous firmware for your router, unplug it from the internet, log in locally & "update" the firmware to the older version. Then turn off the automatic firmware update, and remember not to blindly trust a corporation with making decisions for you.

    4. Re:FU No Thanks by Anonymous Coward · · Score: 0

      Let's see.... Google "accidentally" collected private data and got investigated by a number of countries, including the US. Cisco should face the same probes. In Illinois, it's illegal for libraries to give out a patron's library usage records and law enforcement can only get them with a court warrant or subpeona. I connect to my library online and search for things all the time....

    5. Re:FU No Thanks by Anonymous Coward · · Score: 0

      No, I will not:

      - spy
      - control the device
      - indemnify you
      - give you the right to take such action as we ...are ... required to take by a third party".

      Bite me. All cisco products are going into the trash asap.

    6. Re:FU No Thanks by lpq · · Score: 0

      I used to always get confused when they asked what brand of router I had -- as I've never had one (so I thought).

      Since the late 80's, I've had a linux PC with 2 ethernet ports -- one hooked to an external net with a static address, and one hooked to an internal net on a 192.168.x.x net. My PC was on the internal net and used a proxy to talk to the web. The PC did domain resolution and pulled down email via IMAPS to a local store where it is served to the PC client via IMAPS.

      Somewhere along the line, my firewall/proxy/internet interface linux box was renamed to 'router'.... Oh.

      Now when they asked if I power-cycled my router or what brand, I tell them linux and they get very confused and tell me I'm unsupported.

      *sigh*...

      Guess they can't easily download SW into my router ?

    7. Re:FU No Thanks by Patch86 · · Score: 3, Insightful

      A) This only happens automatically if you have the option for automatic firmware updating checked in your router's config. You lose your geek card & status if you left this option on. Not that I'm saying the average home user (who almost certainly wouldn't know how/why to change this option) deserves to have his/her data snooped, but as a techie, you should know better.

      As a techie, I don't have my router using automatic updates (actually, I'm fairly sure my router doesn't have an automatic updates setting, but all the same).

      But as the "techie friend/relative", I always tell my friends and family to keep automatic updates turned on. They certainly wouldn't update these things themselves (mostly they barely know how to access their router's admin page), and I'm not going to be doing it for every single one of them. And an un-updated router is an insecure router.

      And they don't deserve to be spied on and have their privacy invaded just because they're not very good at network management.

    8. Re:FU No Thanks by Jeng · · Score: 0

      I like their routers, but there is NO CHANCE whatsoever that I will give a 3rd party my entire house's internet browsing history. You couldn't get me to do that if you gave me a free router AND free internet.

      Do you consider your ISP a third party?

      --
      Don't know something? Look it up. Still don't know? Then ask.
    9. Re:FU No Thanks by Kalriath · · Score: 1

      No. The ISP is the Second Party to your internet contract.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    10. Re:FU No Thanks by Kalriath · · Score: 1

      So what you're saying is that you aren't allowed to download porn with a Linksys router?

      Yeah, that'll fly.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    11. Re:FU No Thanks by Anonymous Coward · · Score: 0

      That's the problem with selling a service like this. All that data going to them gives them the opportunity to know about crimes and torts being committed. Of course, they don't make money being upstanding citizens and reporting that. That, plus stuff would get through the cracks, even if they tried. They use that clause instead to argue it was reasonable for them not to pay attention.

      If a drug cartel uses their device+service, and Cisco was in the loop every step of the way, that's their only defense. They don't want aiding&abetting charges or contributory infringement accusations.

      BTW, does anyone else find item (i) a tad...ironic?

    12. Re:FU No Thanks by lpq · · Score: 1

      Why would the above be marked as 'troll'?
      Mental instability?

    13. Re:FU No Thanks by PuZZleDucK · · Score: 1

      If only FB made some kind of networked hardware that could be used as a router huh? Oh, they what? When? Oh for Fs-Sake!

      --
      Can a person program a new solution to a problem? Why should anyone be able to stop such a thing? -Richard Stallman
    14. Re:FU No Thanks by dakohli · · Score: 1

      Back in the days when I got my first DSL account, I used Coyote Linux on a stripped down pentium. It ran off of a floppy disk, and was solid. I shared the connection with my room-mates and all was great. It was very stable

      Of course whenever I talked to customer support I never told them that I was even running a router. Just gave them the numbers they asked for. Of course now, almost everybody has a router in the house and the ISP's don't even blink when you mention a router. They may not support them, but they really don't care if you have one.

      I feel your pain, but, I think someone felt you were a troll, because you used Linux in a meaningful, useful way. Some folks are just against that, no matter what the context is. I cannot explain it.

    15. Re:FU No Thanks by dakohli · · Score: 1

      Now to be fair, this only applies to the use of the Cisco Connect Cloud.

      Please correct me if I am wrong here, but I do not think this whole mess is about controlling how you use your router, but rather the unrestricted collection of your web-browsing history to feed the maw of the marketing department of Cisco and their evil allies.

      This data could be embarrassing, I mean who wants their favourite Kitten Porn site released, worse could be the fact that you visit P2P download enabling sites which could eventually have legal consequences.

      Isn't that just delightful, your ISP indicates that your account was used to download copyrighted material, and your own router implicates an individual machine on your own network! Now the media companies can argue that a single IP address can be used to search your router for incriminating information. Oh, that's suspicious, you turned off your logging, now, what do you have to hide?

  6. It's not that hard. by Art+Popp · · Score: 4, Informative

    Buy your router from this enormous list which covers a huge range of budgets:

    http://wiki.openwrt.org/toh/start

    Re-Flash it and be done with these folk. This newer firmware is much friendlier than the original OpenWrt you may have tried years back, and if you don't like what it's doing, you get a command prompt and make it do exactly what you want.

    1. Re:It's not that hard. by EdIII · · Score: 2

      If Cisco is being this monumentally stupid the next step is signed firmware.

      You can dump them out of that list in the future.

    2. Re:It's not that hard. by betterunixthanunix · · Score: 2

      Then we can dump them out of my list of companies whose products I buy, recommend to others, or neglect to give negative reviews to.

      --
      Palm trees and 8
    3. Re:It's not that hard. by Jeng · · Score: 4, Insightful

      I was in the market for a new router, I now know that my next one will either not be another linksys or it will not be running the stock firmware.

      Since most of those who ask me for tech advice might not be up for re-flashing their router I will not be recommending linksys.

      So now the question is, what to recommend instead?

      --
      Don't know something? Look it up. Still don't know? Then ask.
    4. Re:It's not that hard. by spire3661 · · Score: 1

      Already done. A cisco router will never touch my consumer sites again.

      --
      Good-bye
    5. Re:It's not that hard. by TheGratefulNet · · Score: 1

      if cisco ever outs the manager who decided on this AND publicly states they will never again do stuff like this (yeah, right...) I am also adding cisco to my do not buy or recommend list.

      the fact that cisco thought this was OK means they are no longer trustable for home devices. I doubt this was an engineer who just added this at the last minute; this was a long argued and planned 'feature'. it got vetted by the highest levels (it seems) and so its official cisco policy that this is OK to do to users.

      a lot of your return business was due to trust and confidence in the product, design and vetting process. this shows a complete failure of cisco to understand even the basics of user privacy.

      untill they publicly revert this and out the manager (better yet, FIRE HIM), cisco is on my do-not-buy-or-recommend list.

      "vendor blacklists: how do they work?"

      --

      --
      "It is now safe to switch off your computer."
    6. Re:It's not that hard. by pnutjam · · Score: 1

      These look good, http://routerboard.com/RB951-2n, and are under $45.

    7. Re:It's not that hard. by Anonymous Coward · · Score: 0

      I've stuck with the older Linksys/Cisco models that support DD-WRT, Tomato, etc. I won't buy a router that *doesn't* give me the option of "3rd party" firmware (and I have multiple IP's, so I need firmware that allows me to use them).

      They start doing this stuff, and then adding in signed firmware? Yup, I will never buy another cisco product, and will not only NOT recommend them to others, I'll *actively* tell people NOT to buy their products.

    8. Re:It's not that hard. by Kalriath · · Score: 1

      So, um, what are you going to do if they refuse to out the person who approved it and publicly states they won't do it again?

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    9. Re:It's not that hard. by Anonymous Coward · · Score: 0

      Buffalo brand. They even come STOCK with WRT. ;)

      Best Buy even sells a couple of version of them.

  7. Backdoor by SJHillman · · Score: 4, Interesting

    Does this mean that Cisco routers, by default, have a backdoor enabled that allows the router to phone home for updates and for Cisco to send them back? None of the routers I've ever used (granted, it's been a while since I've used stock firmware) have ever had any sort of "automatic updates", much less one that's turned on by default.

    1. Re:Backdoor by Nutria · · Score: 1

      My question exactly. Someone would have noticed long ago weird phone-home packets being sent out by Cisco/Linksys routers.

      --
      "I don't know, therefore Aliens" Wafflebox1
    2. Re:Backdoor by Anonymous Coward · · Score: 0

      Yes, it's called "Enable Automatic Updates" and it's enabled by default.

    3. Re:Backdoor by nurb432 · · Score: 1

      It wasn't enabled by default on the 120N i just picked up. ( i checked before i plugged it into the modem )

      Since i'm stuck with OEM firmware on it, i figured it was safer to leave it off anyway.

      --
      ---- Booth was a patriot ----
  8. CIA by Anonymous Coward · · Score: 1

    Cisco Intelligence Agency.

  9. Gas Warfare by GnetworkGnome · · Score: 1

    As if were not enough that IT Managers the world-round are trying to smother their employees and businesses with the cloud, Cisco has adopted the same model and is currently deploying their own brand of chemical warfare.

    1. Re:Gas Warfare by zoloto · · Score: 1

      Any IT Admin/Manager worth their salt has not succumbed to the "cloud" madness.

  10. Well... by Anonymous Coward · · Score: 0

    I guess this is one company to add to my blacklist...

    1. Re:Well... by jmorris42 · · Score: 2

      > I guess this is one company to add to my blacklist...

      Cisco has been on mine for over a decade. Linksys wasn't until today, even after Cisco bought them out.

      Seriously, name me another software company that refuses security and critical bug fixes without an ongoing service contract? NO fracking way. Had a couple of their products donated by the Gates Foundation, great reliable hardware. Odd, usable but baroque configuration system. But anything you want to connect to or insert into one is priced like they were a defense contractor and the company itself is horrid. So of course 'everyone' uses their stuff. Intelligent life in space? How 'bout we search for Earthly Intelligence first, K?

      --
      Democrat delenda est
    2. Re:Well... by NeverVotedBush · · Score: 1

      They just went on my blacklist.

      I will NEVER buy or recommend another Cisco or Linksys product again.

      I agree with the other posters who have noted that this would have been vetted at the highest levels. This represents a corporate mindset there now and I want no part of it or to support it.

      And I will explain to everyone that I discuss this with the part of their service agreement that says they will gladly hand your internet usage information over to courts and third parties.

    3. Re:Well... by Kalriath · · Score: 1

      Uh, there are fucking TONS of software companies that refuse security and critical bug fixes without a service contract. Some of them even backdate renewals to the time that the contract last expired (so to renew a two year expired contract you need to pay for the intervening two years). This is COMMON now.

      I even have one router on hand (Linux based) that requires an active service agreement to use at all. (Mako Networks in case you're curious).

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  11. One more reason to buy Juniper by Anonymous Coward · · Score: 1

    Aside from the fact that Juniper is Ferrari and Cisco is General Motors.

    1. Re:One more reason to buy Juniper by scubamage · · Score: 1

      Except juniper virtual chassis doesn't support port mirroring (for now, they're expecting it to take ~9 months to fix).

    2. Re:One more reason to buy Juniper by Anonymous Coward · · Score: 3, Funny

      Er, so Cisco is cheap and reasonably reliable while Juniper is obscenely expensive and notoriously unreliable?

    3. Re:One more reason to buy Juniper by Jeng · · Score: 1

      Most people who buy GM are not able to afford a Ferrari.

      --
      Don't know something? Look it up. Still don't know? Then ask.
    4. Re:One more reason to buy Juniper by Anonymous Coward · · Score: 0

      Our Juniper SSGs have been and still remain the most reliable equipment we have! The Asa we have is horribly convoluted to configure.

  12. Wiretapping laws? by Anonymous Coward · · Score: 0

    Would this violate federal wiretapping laws?

    1. Re:Wiretapping laws? by Anonymous Coward · · Score: 0

      Since when are global corporations bound by pesky laws?

    2. Re:Wiretapping laws? by postbigbang · · Score: 1

      It violates human rights. Cisco has no business tracking user history. Federal law? Privacy law? I hope they throw the book at them. What churl.

      Who do they think they are, Oracle or Google???

      --
      ---- Teach Peace. It's Cheaper Than War.
    3. Re:Wiretapping laws? by CanHasDIY · · Score: 1

      Not under CISPA.

      Speaking of which, whatever happened to Obama's promise to veto that one? Meet the new Boss...

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
  13. Something missing by Nkwe · · Score: 1

    So if my router can't get to the Internet (my static IP changed or something), and I can't log in locally to the router, how do I configure it? Surely we are missing part of the story.

    1. Re:Something missing by SJHillman · · Score: 4, Informative

      As the summary mentions, if you disconnect from the Internet then you can log in locally. However, it looks like most settings are disabled when logging in this way - you presumably have just enough control to get it to reconnect to the Overlords.

    2. Re:Something missing by Local+ID10T · · Score: 2

      If you are not connected to the internet, your router will allow you to connect to it directly and perform manual configuration... but many options are no longer configurable directly. You will still need to connect via "Cloud Connect" to configure the rest of your settings.

      --
      "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
    3. Re:Something missing by belthize · · Score: 1

      I'd suggest a 3lb sledge.

  14. Government by Anonymous Coward · · Score: 5, Insightful

    Although this is pure speculation, but I have reasonable suspicion as a former employee of Cisco, that this really plays well with law enforcement and other three letter government agencies, having the ability to track all Internet activities. That's all I have to offer on this subject. Be careful.

    1. Re:Government by Anonymous Coward · · Score: 1

      Horrific. I don't mind a cloud-based service, access to my hardware and things, but the minute I read that it tracks history - Cisco - you're done for me and anyone I can share this with. I work in a large IT shop, and its the talk of the day. Again, thank you Cisco.

    2. Re:Government by peppepz · · Score: 2
      One step at a time, people will get used to that kind of tracking and will find it normal.

      Compare the reaction that people had when stuff like Bonzi Buddy peeked at their web history in the 90s, to the one they have today when Google (or Facebook, or whoever else...) track every trackable aspect of their everyday life.

    3. Re:Government by jon3k · · Score: 1

      Nice try dlink salesman, I'm on to you!

    4. Re:Government by Lawrence_Bird · · Score: 3, Interesting

      time for a FOIA request to FBI, NSA,DOJ, etc on their contacts with Cisco on t his topic. When shit comes back redacted, if at all, you'll know whats up for sure.

    5. Re:Government by Anonymous Coward · · Score: 0

      This will play very badly with the European Comission for Data Protection and Privacy.

      Expect a lawsuit cisco... :)

    6. Re:Government by Kalriath · · Score: 1

      I've also sent an enquiry to New Zealand's Privacy Commissioner about this. I'd encourage everyone everywhere to bring this to the attention of their privacy protection organisation - Google has been slapped down for less, and this seems like the sort of thing every government loves to see for some quick win PR points.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    7. Re:Government by epine · · Score: 1

      One step at a time, the tired, the poor, the huddled masses, the wretched refuse, and the homeless will get used to that kind of tracking and will find it normal.

      FTFY, but I had to delete "yearning to breathe free".

  15. Cisco Routers? by Nethead · · Score: 5, Interesting

    That's a large field. Is this just the home routers (the old linksys stuff?) I can't see them doing this on enterprise or core routers. The solution is to put it in bridge mode if it's an ADSL router and do your own NAT, etc. with a BSD/Linux box of some type. Run Zeroshell if you want a nice GUI.

    Really, this is slashdot. Leave the provider installs and help desks to the punters. If you're reading this there is no reason you should be running what the ILEC initially installed.

    Cisco is getting weird. On one side (enterprise) you have to pay through the nose for updates, on the other (home) you can't avoid them.

    Before we get our panties all in a bunch, let's wait for some packet sniffs to see what is really going on. Just because the lawyers put it in the EULA, doesn't mean the coders wrote it.

    --
    -- I have a private email server in my basement.
    1. Re:Cisco Routers? by TheGratefulNet · · Score: 3, Insightful

      they would not dare do this to enterprise customers. those guys take privacy a wee bit more seriously than home users do. they also have big lawyers and would not hesitate to sue if some unplanned update was forced on them that changed their whole security architecture.

      home users don't have big lawyers and so they are defenseless against big corps.

      I just can't see why cisco thought this would be a good idea. its got FAIL written all over it and will go down in history as a 'sony rootkit' type event. just wow...

      --

      --
      "It is now safe to switch off your computer."
    2. Re:Cisco Routers? by grub · · Score: 2


      "on consumer routers" is from the summary.

      --
      Trolling is a art,
    3. Re:Cisco Routers? by Anonymous Coward · · Score: 0

      it would get really messy for enterprise customers, especially with HIPAA requirements being the way they are, imagine, oh look some guy named bob **** just went in for a checkup he weighs..., is over weight and takes viagra

    4. Re:Cisco Routers? by Anonymous Coward · · Score: 0

      Exactly.

      "...and will go down in history as a 'sony rootkit' type event."

      I now have two companies on my Tier 1 DO NOT BUY list - and by that I mean that not only will I never buy a product they produce - any product ever, of any type, no matter how unrelated to computers or their security - but I will endeavor to smoke out all of their partners and, after notifying them of why, refuse to buy their products as well.

      Sony and Cisco.

      I've designed quite a few large networks, and administered several. Hopefully I've caused some tiny amount of pain.

    5. Re:Cisco Routers? by mrmeval · · Score: 1

      Good, then they can release the source code to their enterprise products and let us decide.

      They've done an unethical act. That taints everything they are doing or will do. If they want trust restored it will take far longer and cost more than this will ever garner them.

      --
      I'd go on a Vegan diet but the delivery time from Vega is too long. --brownkitty
  16. OH BOY! by slashmydots · · Score: 4, Interesting

    Wooo, a gigantic web-based backdoor with unknown remote login methods and an interception of all internet history tied directly to my company's cisco account with all our personally identifiable information?! WHERE CAN I GET ONE?! And by one, I mean the phone number for the account cancellation department.

    By the way, my company actually runs some awful piece of crap from Cyberoam but now I'm slightly happier about that. Thanks, cisco.

  17. thank you cisco, by alen · · Score: 2, Insightful

    when my linksys dies i won't buy one of your products. i'll probably just buy one of the Apple routers. the cost is about the same as your overpriced crap but they will work better with the icrap i already have at home.

    i've tried the cheapo routers and they seem flaky

  18. Clarifications and Confirmations by Jahf · · Score: 5, Informative

    * The Cloud firmware is ONLY for EA2700, EA3500, E4200v2 (not v1) and EA4500 routers. Older routers (E4200v1 or older) will not see this update. These routers shipped with information explaining that Cloud would be released this summer and update to the Cloud firmware when it was released.

    * You can prevent this update by turning off "Automatic Updates" in your router. However if you didn't already do this then YES ... disconnect from the Internet before you do anything else. Then go in and turn off the Automatic Updates. Then you can reconnect. Warning: If you've already been upgraded it currently isn't possible to downgrade to the older firmware.

    * If you have updated ... you CAN do -some- local router configuration without having internet access. Just go to http://routers/ LAN IP address]/ while it is disconnected and you will be prompted for the router's local password (usually this will mirror your WiFi password). You will be limited to editing the network settings (LAN, WiFi, etc) and security settings (router password, VPN, firewall, DMZ). Parental controls, Guest Access QoS and USB storage won't be accessible until you are able to log in while the router is online (you'll use your CiscoConnectCloud.com login at this point).

    NOTE: If you have an EA2700, EA3500 or EA4500 that shipped with the OLDER firmware (every router out there so far, the new firmware shouldn't appear in new routers for a couple more weeks) and have not set it up yet and WANT the older firmware ... do NOT use the CD setup. Configure it using the traditional web UI while NOT connected to the Internet and turn off Automatic Updates. Again ... this is only for people who do NOT want the Cloud firmware capabilities.

    * Just an FYI ... the Cisco Connect Cloud concept allows people to manage and view their home network from anywhere on the internet so long as their router has a connection to the internet. Mobile apps allow your phone to control your home network (manage guest settings, see who is online right now, etc). Additionally it enables a plugin mobile application architecture that our partners can leverage to allow remotely managed network applications. It is an entirely new direction and yes ... it has some kinks ... the biggest ones being forcing this on the user and then limiting their ability to manage their device without it being on the internet. ...

    So ... I anticipate a flood of groans about all of this, and I don't disagree with a fair amount of them. Let me make some things clear:

    a) Yes, I work for Cisco Linksys.

    b) No, I am not speaking directly for Cisco in this post nor am I posting on their behalf (I just wanted to get some quick assistance out there to the people who read this).

    c) No, I do not work for the groups (PM, Engineering) that made the decisions to do this update automatically, to not allow you to downgrade, and to not allow you access to your full configuration capability while the router is offline. Which means I can try and funnel your feedback to those groups but I can not force anyone to implement any of it.

    d) While I don't like the situations mentioned above in item "c)" ... I -do- like the CiscoConnectCloud.com concept and feel that Cisco will improve it significantly over time.

    e) I completely ... 100% ... recognize that the /. audience most likely prefers things like DD-WRT, Tomato, etc (though some will really like the mobile Cloud concept, I do, and I've been around the block a few times at this point). Cisco Linksys is definitely moving more towards the average consumer market instead of the tech adopter market with these products.

    f) We do still sell non-Cloud routers, like the E900, E1200 and E2500

    --
    It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    1. Re:Clarifications and Confirmations by Mashiki · · Score: 5, Interesting

      Well if you work for Cisco Linksys you might want to tell some your lawyers(or drop a strong hint to the middle-management types) to look at this, and quickly before it becomes a major headache. Whoever greenlighted this just violated the privacy act in Canada by automatically tracking web history and pushing this update. I'd hazard a guess in various parts of the EU as well.

      --
      Om, nomnomnom...
    2. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 5, Informative

      This is also illegal in Victoria and New South Wales in Australia, I know this because the last company I worked at did a remarkably similar move with their network security products and got sued and fined. What on earth was Cisco thinking with this...

    3. Re:Clarifications and Confirmations by Waffle+Iron · · Score: 4, Insightful

      Just an FYI ... the Cisco Connect Cloud concept allows people to manage and view their home network from anywhere on the internet so long as their router has a connection to the internet.

      Well, I for one got a router in the first place partly because I specifically don't want anybody or anything to manage or view my home network from anywhere outside said network.

      I've set it up to disable all such silliness, and I want it to stay that way.

    4. Re:Clarifications and Confirmations by Local+ID10T · · Score: 5, Informative

      The information on effected models is incomplete.

      My e1000 and e3000 (not listed as Cloud Connect compatible) will no longer allow direct connection and configuration while connected to the internet. They will not accept a connection from the LAN if there is a live cable on the WAN port.

      --
      "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
    5. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      I -do- like the CiscoConnectCloud.com concept and feel that Cisco will improve it significantly over time.

      If I want to remotely manage my network, I CAN ALREADY DO THAT. I don't need Cisco's networks for that. Fuck you very much.

      Seriously, what are you clowns thinking?

    6. Re:Clarifications and Confirmations by mrchaotica · · Score: 1

      So can you tell us who at Cisco we should direct the FBI to prosecute for hacking our routers and stealing our data?

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    7. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Thanks for replying, hope you have your asbestos undies on today.

      f) We do still sell non-Cloud routers, like the E900, E1200 and E2500

      Fine but after you pull something like this why the hell would I trust your gear in the future? Who knows what kind of bullshit Cisco might try to auto-update into my gear, or have hidden away right from day one?

    8. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      The new feature is insecure and needs to be removed. Point.

    9. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      he probably is a lawyer doing PR cleanup

    10. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Please tell your bosses that when it comes time to replace my networking gear, Cisco will not be on the list.

      I'm only one person but many people listen to me for tech advice. I don't think many of them will be buying Cisco gear any more either.

    11. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      I just ordered a couple of Asus routers and won't be buying Cisco anymore. Period. They've lost all my trust.

    12. Re:Clarifications and Confirmations by Skapare · · Score: 1

      e) I completely ... 100% ... recognize that the /. audience most likely prefers things like DD-WRT, Tomato, etc (though some will really like the mobile Cloud concept, I do, and I've been around the block a few times at this point). Cisco Linksys is definitely moving more towards the average consumer market instead of the tech adopter market with these products.

      It should always be an owner choice (just provide a means to load a non-Cloud firmware w/o any need for a Cloud userid, for anyone with physical access to the router that can do a reset-boot). Company philosophy to the contrary means people avoiding the company for other things. Sure, Cisco most likely will not see any dings to high end core router sales. But sales of mid-level stuff that isn't even marketed to SOHO could be affected. And we may well end up prohibiting our telecommute staff from using Linksys. I've been considering the idea that the company provide routers for them, anyway. It won't be CIsco. Most likely it will be something based on DD-WRT, and maybe even a local build of it if I get the time to delve into it.

      FYI, the general simple solution for a reset-boot for devices with a flash drive (USB, SD card, etc) connection is when powering up while holding the reset button, while the flash media is attached, the unwritable boot PROM will scan the media for a firmware image file in a designated directory and load it to RAM and run it. It will then default configure to default IP addresses on the LAN side. The first web page will have an option to rewrite the firmware flash storage with this firmware. This should be on all devices not intended for classified sealed operation (that's not SOHO).

      f) We do still sell non-Cloud routers, like the E900, E1200 and E2500

      And has the company issued a promise that these will never be borged? Keep in mind that if they ever break a promise (and I'm not sure they haven't, already) then promises from them would not longer be worth anything across the entire product line.

      --
      now we need to go OSS in diesel cars
    13. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Oh but you can downgrade your firmware as I spoke to a tech and they gave me the steps for my EA4500.

      Per our conversation, please download the EA4500 firmware from the link below to rollback your firmware:

      https://www.dropbox.com/s/ph3a9jbfge5or9l/FW_EA4500_2.0.37.131047.SSA

      Now, follow the instructions below to rollback the firmware:

      1. Unplug the Ethernet cable from the WAN port of your EA4500 router.

      2. Go to http://192.168.1.1 to access your router. NOTE: Username and password should still be what you have previously used.

      3. Once logged in, Click on Connectivity from the menu options on the left.

      4. The Firmware Update option will be on the right-hand side of the first tab.

      5. Within the Manual box, click on the “Choose File” button

      6. Browse to the file you downloaded the firmware to.

      7. Once selected, click start.

      8. Once your router is rolled back, you will need to log back into your router and disable automatic firmware updates or your router will upgrade again.

      9. This option can be disabled by clicking on the Administrative tab and then the Firmware Upgrade sub-tab.

      10. Save settings

    14. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Doesn't Cisco realize that this stupid stunt is going to tarnish their reputation with technical people who buy serious amounts of Cisco gear?

      Is this consumer information really worth the cost of Cisco's reputation among their bigger and more knowledgeable customers?

    15. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Oh yes, I'd LOVE to download this firmware from dropbox and install it on my router, what could possibly go wrong?

    16. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      That. I will never recommend a Cisco home product again. They're still the go-to manufacturer of enterprise-grade networking equipment, but they would do well to remember that a lot of the admins who make purchasing recommendations ALSO do a fair amount of home networking for themselves and family/friends. Those admins may allow their bias to influence those purchasing recommendations, however undeservedly.

    17. Re:Clarifications and Confirmations by sstamps · · Score: 2

      Under what circumstances would I want to be able to remotely manage my /router/ setup? I honestly cannot think of ANY.

      Why would I want to allow ANYTHING OUTSIDE OF MY NETWORK to be able to change my router settings, thus potentially compromising the security of my private network?

      Why would I want to use a service which allows uninvolved third parties to track my internet usage without my explicit consent?

      Why would I want to use a product which forces this bullshit "opt-out" style upon me?

      Until your company can answer those questions to my satisfaction, you can tell your moron execs that I will not be purchasing --ANY-- Cisco products, and will be actively discouraging my customers from purchasing same.

      --
      -SS "Teach the ignorant, care for the dumb, and punish the stupid."
    18. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      All I can say is that if Cisco even 1/2 attempts to pull any of this bullshit in their Enterprise gear, they are GONE from the next multi-million RFP, and then I will be shorting your stock because it would be a move of hubris beyond stupidity. The "call-home" feature auto-added into the IOS firmware a couple of years back that you couldn't initially delete was a red flag for me. Yes, you make great Enterprise products, but do not think you can pull a facebook on the privacy lines in the sand for Enterprise customers.

      Oh and in case I'm not clear.... this (cloud spying) on our home routers is TOTAL bullshit! FU Cisco.

    19. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Where can I get the older firmware? It's not on the Cisco Home website. I don't want to call tech support for this. I can do it myself.

      BTW, I did willingly install this as I wanted to see how the old Network Magic features were integrated (e.g., Device List). I immediately turned off app access from the Internet. I merely wanted more function on my local network.

    20. Re:Clarifications and Confirmations by Glendale2x · · Score: 2

      Because it's The Cloud.

      --
      this is my sig
    21. Re:Clarifications and Confirmations by BronsCon · · Score: 1

      You'll love those Asus routers. I only ended up with a Netgear when I did my last upgrade because I didn't want to wait for the Asus I was eyeballing to be restocked.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    22. Re:Clarifications and Confirmations by spire3661 · · Score: 1

      Its called trust. thats not bias, or undeserved. This is a HUGE GIANT trust issue. I can no longer trust them to operate solely as an equipment manufacturer, they are now also an information broker, of MY information, without compensation or consent.

      --
      Good-bye
    23. Re:Clarifications and Confirmations by UnderCoverPenguin · · Score: 1

      My e1000 and e3000 (not listed as Cloud Connect compatible) will no longer allow direct connection and configuration while connected to the internet. They will not accept a connection from the LAN if there is a live cable on the WAN port.

      This could be a good thing. When you disconnect the WAN side, what else is disabled or missing (or new)?

      But, good, bad or invisable, there is still the possibility of monitoring being installed as part of the update.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    24. Re:Clarifications and Confirmations by tupletuple · · Score: 2

      This is a monumentally bad decision. Punching holes in countless devices WILL become a security nightmare. I imagine that there are hundreds to thousands of people currently attempting to determine the means and methods of remote administration and how they can take advantage of it.

      I question the health of an organization which decides (as a whole) that enforcing a remote administration hole is a good idea.

      I cannot in good conscience recommend any cisco device to the plethora of friends and family who ask such things of me. I would expose them to greatly increased risk, not only from the exposed remote administration, but from legal action concerning the sites/locations that they visit should any such activity raise eyebrows.

      As a systems engineer who often has input into data center needs, I will have to think long and hard about using the products of a company which exhibits such poor judgement, lest such management overreach extend into other products/departments. This may seem extreme, but a home router is primarily a security device and if a company cannot enforce basic security practices there, how long before such poor decisions begin to infect enterprise devices?

      My old linksys router is elderly and I have concidered replacing it, my list of options just shrank.

    25. Re:Clarifications and Confirmations by UnderCoverPenguin · · Score: 1

      I've been considering the idea that the company provide routers for them, anyway. It won't be CIsco. Most likely it will be something based on DD-WRT, and maybe even a local build of it if I get the time to delve into it,

      I just remembered a post by one of the open sourse "super luminaries" that building from source is not enough. You first have to review the source completely. And even then, you can't be sure of the compiler. It is possible to plant a virus in the compiler that inflects anything you build with it. That leads to a chicken-and-egg problem. Is the GCC "boot strap" compiler useful any more?

      FYI, the boot strap compiler is a set of compilers, from very simple to full featured, to enable getting a compiler running on a new archetecture. The idea is that the simple compiler is not too unreasonable to compile "by hand", then is used to compile the next, more sophisticated compiler, then use that to compile an even more sophiosticated compiler until you have the full featured compiler running.. This technique has not been needed for many years as one can use the new "back end", for the target archetecture, with a compiler already running on any convenient machine. The resulting executables can then be run on the new machine.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    26. Re:Clarifications and Confirmations by UnderCoverPenguin · · Score: 2

      that will forbid anyone from connecting to our network from home while using a Cisco/Cisco-Linksys/Linksys branded device

      The company I work for provides us with laptops with a preconfigured, stronly encrypted VPN installed. These laptops are the only way we can connect to the company network - in the office or not. Our IT department basically assumes that any network or PC outside of the company's network is insecure or otherwise not trustworthy. The VPN allows us safer access while we are working outside the office (for example, at customer or supplier offices - and yes, even us software developers get to go to off-site meetings)

      While issuing company owned and configured routers to your workers might sound like a good idea, it isn't. Because you will still be exposing your company's network to untrustworthy PCs. Though you could configure the routers to only work with company issued PCs, there are ways around this. Your best option is to install a good, strongly encrypted VPN on company issued PCs and only allow those to connect to the company's network.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    27. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Why on earth would you point people to dropbox when Linksys still hosts it in their downloads?

      For the 4500: http://homedownloads.cisco.com/downloads/firmware/FW_E4200_2.0.37.131047.SSA

    28. Re:Clarifications and Confirmations by sjames · · Score: 1

      Fine and dandy. The problem is the fine print that was slipped in that Cisco gets to track the user. People do not like getting a tranq dart to the butt and waking up with a tracking collar riveted to their neck. I'm guessing a lot of people would have avoided those models had that little bombshell been pointed out in advance in a font large enough to be seen.

    29. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Jahf, only 7 days ago you wrote:

      by Jahf on Friday June 22, @03:21PM (#40415363) Attached to: Google Touts Worker Tracking As Own CEO Goes MIA

      rooted device + fakeGPS = workaround ... however ...

      When they stop letting me use my personal device and/or refuse to let me root ... then we have an issue. An issue that shouldn't have occurred in the first place. I know I'd fight this.

      As a full-time telecommuter I tend to work from coffee shops, restaurants, and waaaaay past normal work hours as it is. My productivity should be what they care about. If I am tethered to a desk and need to work normal office hours, that's fine, but my stuff will be OFF for the other 16 hours and they don't want that, either.

      You have an opportunity here to be a hero, that it is your company now. So fight it. Keep your word.

    30. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      And quite sketchy even here in the US, if somebody accesses their medical records or somesuch from home...HIPAA and all. Sure, it *should* be encrypted, but if I ran the storage farm at Crisco that's housing this, I'd be "working from home" a lot, while I found myself a new place to work....

    31. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Jahf - When Linksys decided to take over remote administration you incurred a huge liability. God help you if there are any security holes that allow others to piggyback on the collected data from these routers.

      I agree with the others that there will be organizations that will no longer allow their employees to access through a router that collects and ships this information off that can be shared with whoever Cisco decides or whoever the user unwittingly allows through the use of some enticing third party application.

      It looks like Cisco is being open about the information harvest aspect but this is just a really bad idea - especially the pulling of older firmware versions so people can back this out. A suggestion would be to continue supporting non-cloud firmware and make it very clear to users what liabilities and loss of privacy this cloud mess is.

      I'm really curious what the computer security press is going to be saying about all this. From the reaction here I'm betting it won't be good.

    32. Re:Clarifications and Confirmations by Nutria · · Score: 2

      You're so completely full of crap.

      The only people in companies with 78k employees who can get their legal department to move on such an issue are senior executives.

      Senior executives in major corporations do not read /. and even if they did, would not understand the ramifications or might even think them a good idea.

      --
      "I don't know, therefore Aliens" Wafflebox1
    33. Re:Clarifications and Confirmations by Cinder6 · · Score: 1

      Nice reply. I don't have a Cisco router at home, but I do have one where I work that may be affected by this (small independently-owned business, so no fancy stuff for us). I think the problem people are going to have with point f is that Cisco's upper management has proven themselves untrustworthy. For myself, I wouldn't be horribly bothered if it were "just" a matter of having it be an automatic (non-opt in) update, but the browsing history aspect is the clincher. Like many here, I am going to stop recommending Cisco- or Linksys-branded products unless Cisco quickly backpedals and apologizes for this.

      Now for something less controversial: I'm not certain of the benefits of cloud router configuration. Generally, once I set up a router (or switch, etc.) how I want/need it, I never have to touch the configuration page again. In the rare event that I do need to access the configuration page, then the problem is usually to the degree that it takes out my Internet access as well, meaning that I would have no option to actually fix the problem if I'm forced to use Connect Cloud. Thus, it seems more of a liability than an asset, but I could easily be wrong, or be ignorant of any added features/bonuses.

      Anyone care to enlighten me?

      --
      If you can't convince them, convict them.
    34. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 1

      The EU is toothless when it comes to this. They have zero enforcing authority on this measure, and all they can do is perhaps waggle a finger at Cisco in some auditorium.

      Canada similar. By using the device, any Canadian has explicitly agreed to the use policy. EULAs are enforceable, and if someone chooses to hand their data over to a company as part of an agreement, Cisco lawyers have zero to worry about in this department.

      Realistically, if any action is done on this by any government, I'll piss on a spark plug.

    35. Re:Clarifications and Confirmations by JohnFen · · Score: 1

      Well, to be fair, Cisco's reputation had already gained a fair amount of tarnish before this.

    36. Re:Clarifications and Confirmations by DroolTwist · · Score: 1

      Firmware from dropbox.com. I'll get right on that.

    37. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Ballsy comment. I installed my router for the first time this week, didn't realize "check for updates" meant "cleveland steamer please"

    38. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      EULAs are enforceable, and if someone chooses to hand their data over to a company as part of an agreement

      "Shrink wrap" EULA's are not enforceable in Canada, and anything in Canada which deals with a persons data, or anything which can be tracked, monitored, or deals with sensitive information in any form requires the company to get their permission in writing. A "I agree" via checkbox is not considered legal, or valid. Nor is a 12 page document full of legalese.

      See Facebook and the $200m fine that they were facing until they changed their data collection ways here.

    39. Re:Clarifications and Confirmations by Ol+Olsoc · · Score: 1

      Just an FYI ... the Cisco Connect Cloud concept allows people to manage and view their home network from anywhere on the internet so long as their router has a connection to the internet. Mobile apps allow your phone to control your home network (manage guest settings, see who is online right now, etc).

      About freaking time! It's very important for people to check on their home network when no one is there using it.

      Other things that will enhance the user experience are Keystroke logging, because you never know when you'll forget what you typed, and it will be helpful to store all that in the cloud.

      And last but not least, you need to add remote actuation of the webcam. Then you'll really be cooking.

      We do still sell non-Cloud routers, like the E900, E1200 and E2500

      I'm sure you do. But now that Cisco has gone all Sony on us, I'll pass.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    40. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      To the Cloud!!

    41. Re:Clarifications and Confirmations by Jahf · · Score: 1

      No, I'm a systems engineer trying to get some facts and help out to my fellow /.'ers. I didn't come here to fix something that was reported to me ... I was reading /. ... saw something I could post intelligently about ... and did that. I'm not in PM, PR or Legal.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    42. Re:Clarifications and Confirmations by Jahf · · Score: 1

      Thanks ... I wasn't aware of the procedure when I posted my original branch. It looks like Cisco may have shut off the automatic upgrades, too, based on some other reports I got today.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    43. Re:Clarifications and Confirmations by Jahf · · Score: 1

      apples != oranges

      a) different topics, one was about my phone ... the other about a router that does what I need it to do. For what it's worth, I have a choice of which router I use ... and while I'm choosing to use the new router provided by my employer because it does what I want ... I could also go use a personal DD-WRT router or competitor's router. Therefore I have the choice to use my personal device and my personal device can be rooted. It just wouldn't be the device I was given to use.

      b) I already funneled in a bunch of feedback from this thread. That's about all I can do in the short term. They are aware of the issues ... and have acted (support released a method for reverting firmware and, if reports I got are correct, the firmware was yanked from the auto-update process at least for the time being). Remains to be seen what the long term solution will be on this, and I'll keep raising the flag when given the opportunity, but don't mistake me for someone who has any authority over those decisions.

      PS. As part of my raising the issue, I also notified my exec chain of my UID here on /. ... so I've got a fine line to pull on both sides.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    44. Re:Clarifications and Confirmations by Kalriath · · Score: 1

      Also illegal in New Zealand.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    45. Re:Clarifications and Confirmations by Kalriath · · Score: 1

      HAHAHA. By which I mean, you do not work in a company with 78K employees. And if you do, you're an average grunt and have nowhere near enough authority to make a procurement or legal decision. After all, if you were, you'd know that you have a Preferred Supplier agreement for your router hardware (meaning changing vendoris an epic challenge requiring the equivalent of the passage of a government act, plus making all your network infrastructure team redundant and hiring new engineers proficient in your new brand), and you'd also know that a Cisco ASA neither has this functionality nor ever will have this functionality.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    46. Re:Clarifications and Confirmations by Kalriath · · Score: 1

      You know by implementing this, you actually made it technically unlawful for me to even use your products any more right? As an employee of a health sector company, I'm bound to very strict privacy regulations in terms of access to information that I'd be violating the instant I expose one of these routers to a data stream between me and (ironically) the Cisco VPN Concentrator we use for remote access. Did marketing even consider the fact that large swathes of customers can't legally use any products with this functionality?

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    47. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Take your spam elsewhere, fucker. This is an article blasting this stupid new shit, not talking it up.

    48. Re:Clarifications and Confirmations by Anonymous Coward · · Score: 0

      Nobody F%%%ing cares about technicalities.

      CISCO claims the right in small print to sniff my network.

      All my CISCO gear has been ripped out. I can not risk dealing with such a company. I can not allow my web traffic to be sniffed (due to FERPA.)

      This equipment is now evidence in my Dallas Count Small Claims Court lawsuit aginst the CISCO A%%-%%%%S in Richardson, TX.

      I'm looking for a bull-horn to picket them, Alex Jones style. (If you are not familiar with Alex Jones, see here: http://www.youtube.com/watch?v=sJEjjXeUYK4)

      We are at war. My objective is to label all equipment that spies on its users with large red labels.

    49. Re:Clarifications and Confirmations by Skapare · · Score: 1

      rephrasing ... "Our IT department basically assumes that any network or PC outside of the company's network is insecure or otherwise not trustworthy ... so it allows a laptop in an unsafe environment to come right on in and look like all the secure laptops in the network.

      --
      now we need to go OSS in diesel cars
    50. Re:Clarifications and Confirmations by Skapare · · Score: 1

      And this is why big corporations are the ones failing security 101 the most.

      --
      now we need to go OSS in diesel cars
  19. china did it stage 1 is starting by Anonymous Coward · · Score: 0

    china did it stage 1 is starting

  20. No more Cisco products by Anonymous Coward · · Score: 0

    My company has colocation facilities in two datacenters. Some of the gear is Cisco gear.

    When it comes time to replace said gear, it will not be replaced with more Cisco gear.

    I don't care if the professional grade equipment doesn't have the same craptastic firmware "upgrade" methodology. For those of us that know to take their buying power elsewhere when downright evil decisions like this happen this is the type of thing that makes us do it.

    My parting "upgrade" to you Cisco: my company's dollars you just lost. Maybe you'll still hit your quarterly numbers, but you won't do it on my back.

  21. Cisco/Linksys weren't that good anyway by tkrotchko · · Score: 4, Informative

    Cisco had limited what Linksys routers could do as to discourage corporate sales.

    There are many better choices than Linksys these days.

    The N900 is pretty nice, along with dozens. They're cheap (you can get decent non-cisco routers for $30 on sale)

    Just use something else.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
    1. Re:Cisco/Linksys weren't that good anyway by Skapare · · Score: 1

      I've always been having troubles with Linksys. I was amazed a "reputable" company like Cisco would manage to position their low end product line at the very bottom of the low end SOHO market. But they did. And now I can't even trust them for the mid-level stuff. I'm now getting ethernet handoffs from upstream, and there are plenty of other choices like these, or just build it yourself (I have one such router working now in a data center to satisfy IPv6 needs to see a router).

      --
      now we need to go OSS in diesel cars
    2. Re:Cisco/Linksys weren't that good anyway by UnderCoverPenguin · · Score: 1

      I originally got a d-Link WiFi router, parly because fellow geeks I knew liked it and I could buy a bundled router and WiFi card for my laptop. After about 6 months, the router started randomly reseting. Since it was beyind the 90 day warrantee it came with, I tried calling d-Link tech support to resolve the problem. But, after a month and still no resolution, I then got a Linksys WRT54G based on recomendations of fellow geeks I knew. Never had a problem with it. 2 years, after getting a new laptop with built in 802.11n, I got a Linksys E3000. Have never had a problem, with it.

      Apparantly this Cloud Connect service is not available for the E3000, so I don't have to worry about it. However, unlikely I will get another Cisco product, and certainly not one with this Cloud Connect service. Nor will I get one with a similar service from another vendor.

      Of course, it is probably just a matter of time before all SOHO and other non-enterprise routers have monitoring built in. I hope my E3000 lasts a good long time and at least one of the open source firmware projects continues to support it.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    3. Re:Cisco/Linksys weren't that good anyway by UnderCoverPenguin · · Score: 1

      On further thought, see my posting in another sub-thread, about building from source and questioning the compiler.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
  22. "Supported" Routers by wonkavader · · Score: 1

    Has anyone found a list of which routers are "supported" by this? I'd like to know if I have to take mine off-line right now.

    Do I have a few days to go to openWRT, or do I have to do it today?

  23. It was pushed...? by Anonymous Coward · · Score: 0

    Are they sure it was a push update and not something the routers downloaded automatically, on their own? As in, you could have had this option disabled to avoid this mess? A lot of devices these days are set to download updates by default; it doesn't seem to me like it would be all that practical for Cisco to push that many updates... unless the devices already had some kind of phone home ability... which again it would be easier (and pretty common) to just have the devices themselves download and patch than it would be for Cisco to do everything.

    1. Re:It was pushed...? by wonkavader · · Score: 1

      Looks like it's a pull. You can stop it by turning off auto-update.

  24. The Solution by Chemisor · · Score: 2

    Install DD-WRT. Many Cisco routers are supported.

    1. Re:The Solution by thexile · · Score: 0

      Newer Cisco/Linksys routers are using Marvell chipset. DD-WRT is basically for Broadcom-based routers.

  25. Stock Price by Anonymous Coward · · Score: 0

    Here's a question to put our Machiavellian thinking caps on for: Will Cisco's stock go up or down because of this? They're WAY pissing off their techie constituency, in an amazing way. They've just completely stopped the sale of routers to those people overnight. But they're grabbing data from the masses, and will be selling that. What will the media and the stock market think?

    1. Re:Stock Price by Megane · · Score: 1

      Will Cisco's stock go up or down because of this?

      I expect it to continue to flail aimlessly in the same way it has for years. (Former employee, going to start selling my old ESPP shares when it hits 20 again just so I won't have to care anymore.)

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
  26. Crap by Anonymous Coward · · Score: 0

    They already got my EA3500 router, now I can't get in locally. I hope there's a workaround for this or an alternate administration URL.

  27. Upgrade Instructions for STUPID OWNERS by plover · · Score: 4, Insightful

    So who just plugs in a firewall/router and starts using it out of the box without changing the password and checking over all the settings?

    Under the Administration / Management tab, you'll find a radio button clearly marked "Remote Management", and beneath that settings for Remote Upgrade. The day I installed it I discovered remote management was enabled by default, so I immediately set it to disabled. I remember thinking "My god, that's f*ing stupid! Who would ever want to expose router management to the wild side?" Apparently this answers my question.

    Anyway, for anyone here who is outraged that their router has been pwnd by Cisco, SHAME ON YOU for not securing your own damn router yourself before hanging it on the intarwebs!

    --
    John
    1. Re:Upgrade Instructions for STUPID OWNERS by symbolset · · Score: 4, Insightful

      I guess the question to ask yourself is, if a company would do this then what would that checkbox do?

      --
      Help stamp out iliturcy.
    2. Re:Upgrade Instructions for STUPID OWNERS by JDG1980 · · Score: 5, Insightful

      So who just plugs in a firewall/router and starts using it out of the box without changing the password and checking over all the settings?

      Average users.

      Under the Administration / Management tab, you'll find a radio button clearly marked "Remote Management", and beneath that settings for Remote Upgrade. The day I installed it I discovered remote management was enabled by default, so I immediately set it to disabled. I remember thinking "My god, that's f*ing stupid! Who would ever want to expose router management to the wild side?" Apparently this answers my question.

      This should never have been enabled by default. It's terrible security practice: the default settings should be as secure as is reasonably possible, and any loosening of those settings should have to be explicitly approved by the user/administrator. This is especially true on a consumer focused product that many users aren't going to be configuring at all.

    3. Re:Upgrade Instructions for STUPID OWNERS by DJRumpy · · Score: 5, Funny

      I told my parents they should be ashamed. They first wanted to know what pwnd meant and if it involved urination. Then then wanted to know what Remote Management meant and how they get it. They looked for a radio button on the router, but couldn't find any stations they liked to listen to, and when they tried to dial the radio button, the antenna fell off.

      They weren't worried about the interwebs though, as they were sure they had a floppy for it in their desk drawer...

    4. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 3, Insightful

      I know exactly why Cisco did it, so they could remotely administer routers for "average users". That's not necessarily a terrible thing.

      My complaint is with technical people, such as the fine folks lurking here on slashdot, accepting any security device's defaults without checking them over. It's not like it requires arcane knowledge to look at the configuration screens; it just takes a mouse. You don't have to find a bunch of settings in a README.TXT file from some random website to know what you're looking for, or pull up a wiki page to explain what you're seeing. It's a button on a GUI screen that's clearly screaming out "LET SOMEONE ELSE RANDOMLY MESS AROUND WITH YOUR SECURITY", and these supposedly technical people left it checked. I clearly have no sympathy for them.

      --
      John
    5. Re:Upgrade Instructions for STUPID OWNERS by stanlyb · · Score: 1

      And what would you do if the next upgrade checks this option automatically, and FORBIDS you to uncheck it? I know i know, you would not install any upgrades at all......

    6. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 0

      And are your parents rabid Slashdot denizens? Does your dad have a 4 digit UID? Does your mom keep her CISSP current? Then no, I'm not shaming your parents.

      You, on the other hand, if you owned one of these and accepted the defaults, well, why wouldn't you have looked? Why would you have left remote management enabled?

      --
      John
    7. Re:Upgrade Instructions for STUPID OWNERS by scubamage · · Score: 1

      SNMPv3 can have its own users configured, and you can use it to push out a firmware. So changing the default login info wouldn't matter if they created an SNMPv3 user to push out the firmware to your system since it would exist outside of the firmware authentication.

    8. Re:Upgrade Instructions for STUPID OWNERS by UnderCoverPenguin · · Score: 3, Interesting

      So who just plugs in a firewall/router and starts using it out of the box without changing the password and checking over all the settings?

      You presume that disabling remote management and automatic updates actually proevents the vendor from remote access to your router.

      I did disable automatic updates and remote management. Having just found out about this, I will find out this evening whether they pwned my E3000

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    9. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 1

      Actually, I'm seriously considering upgrading it. I want to make sure that any needed security patches are in place. But before I do, I will confirm that's it's not the case that remote management is mandatory.

      On the brighter side, mine is an E4200.V1, which is supported by dd-wrt. Should someone discover a bug that they will not provide a secure remote-less upgrade for, I will simply replace the firmware.

      --
      John
    10. Re:Upgrade Instructions for STUPID OWNERS by cant_get_a_good_nick · · Score: 4, Insightful

      ho? Normal people, who don't have computers skills. People who don't know a firewall from Firefox would. It seems you damn them to hell.

      Ok, so you know these things. My uncle, who was a CFO for a Fortune 500 company, doesn't know. Is he stupid? No, he just is as clueless about firewall and remote management as you would be about FASB157 and how you need to restructure your portfolio to comply. Are you saying that he shouldn't be on the Internet?

      I know a bit about cars, I've changed oil, fixed a EGR valve, some very minimal carburetor work, but I couldn't do a tune-up on a modern car to save my life. I don't have the tools, nor the specialty. My wife knows less than I do. I don't know how to set up my fuel injector ratios, should we not drive? No, we trust the people who made our car and those who tune up our car (we're lucky we have a very good mechanic) to fix as needed. In the case of our car, we're literally putting our lives in Baykar's very capable hands.

      We (collective we) hoped that we could trust Cisco to be trustworthy as well. For it to have capable, safe defaults for the vast majority of newbies that don't know better, and the opportunity for experts to customize. This faith in Cisco seems to be misplaced. Apple is selling billions of dollars of hardware because they understand this, that people don't know everything, and they just want things to work.

    11. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 4, Informative

      Well, when I read this story I immediately logged into my router, and fortunately was not unexpectedly greeted by their cloud. It's still reporting the same firmware version that I last upgraded to. So you should also have no worries.

      --
      John
    12. Re:Upgrade Instructions for STUPID OWNERS by TeddyR · · Score: 1

      I had already disabled the automatic update. Currently running regular firmware 2.0.37.131047

      I wanted to download the latest 2.0.37 to make sure I had a "backup" of the firmware....

      Problem is, at least for the E4200v2 cisco has pulled 2.0.37 from the official download page. The only way to get it is to call them to complain and get a download link for the pre-cloud firmware, which is now "unsupported"...

      --

      --
      Time is on my side
    13. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 1, Informative

      Reread it. I said "ANYONE HERE". That means slashdot readers who don't check their own security settings should be ashamed, not "normal people".

      --
      John
    14. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      *Whooooosh*

    15. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 1

      Do you know if you can configure the "post-cloud" firmware to refuse remote management? I'm still trying to learn that before I upgrade.

      --
      John
    16. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      So the option is to either accept Cloud Connect, or hope that their firmwares have no security issues because you won't upgrade them anymore?

    17. Re:Upgrade Instructions for STUPID OWNERS by Gordonjcp · · Score: 1, Interesting

      We (collective we) hoped that we could trust Cisco to be trustworthy as well.

      Speak for yourself. It's an American company, what makes you think it's trustworthy?

      It's a closed-source binary blob. What makes you think that it's trustworthy at all?

    18. Re:Upgrade Instructions for STUPID OWNERS by contrapunctus · · Score: 5, Interesting

      I know exactly why Cisco did it, so they could remotely administer routers for "average users". That's not necessarily a terrible thing.

      But why do they need browsing history?

    19. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 1

      But why do they need browsing history?

      Because the MPAA/RIAA aren't going to pay to not have the browsing history of customers...

    20. Re:Upgrade Instructions for STUPID OWNERS by Local+ID10T · · Score: 1

      Remote Management != Firmware Upgrade

      Most people do not enable remote management... Its not enabled by default.
      Most people do not disable the automatic firmware updates... which is a default enabled check box on the page/tab for upgrading firmware (which most people don't even look at much less change the settings.)

      --
      "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
    21. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Why browsing history in a consumer grade router? Think, China market.

    22. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      It is part of their secret agreement with the FBI and DHS to try and catch kiddy porners and "terrorists".

    23. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Only good so far as it goes: again, why would they track you as well?

      To complete your car analogy, why should you trust the people who made your car and tune your car to have a detailed log of everywhere you go with the car? Especially after they install it without telling you, just to underline how unsavory it is.

      This is the key here. That guts the trust in both situations. The maintenance utility aspect is just a stalking horse.

    24. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      You are a stupid ignorant chunk of feces.

    25. Re:Upgrade Instructions for STUPID OWNERS by epyT-R · · Score: 3, Insightful

      Just because you don't know how to retool a lock doesn't mean you should hand the keys over to the state.

    26. Re:Upgrade Instructions for STUPID OWNERS by 6ULDV8 · · Score: 2

      How else will they find the good porn?

      --
      Pull my finger for my public key.
    27. Re:Upgrade Instructions for STUPID OWNERS by Jeng · · Score: 3, Interesting

      Marketing Marketing Marketing

      Doesn't matter if it is useful data since Marketing believes that if they have enough data about you that they will be able to create the perfect ad to make you buy a product that you really are not interested in buying.

      --
      Don't know something? Look it up. Still don't know? Then ask.
    28. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      http://yourlogicalfallacyis.com/anecdotal

    29. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 1

      *slow clap*

    30. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 2

      But why do they need browsing history?

      I don't know that they are planning on scraping everyone's browser history. However, because the software can serve as a web proxy, and as such it would have URLs flow through its memory. Technically, someone who saw that information in memory (say in a swap file) would have access to at least some of your "internet history", which this disclaimer would cover.

      However, because the disclaimer is so broad, it gives them license to stuff every URL you surf to into their corporate databases, and hold onto it forever. And there's nothing preventing them from starting out with good intentions (as in the first scenario) and then later providing a firmware update that descends into full-blown real-time reporting to the FBI. Either way, I wouldn't voluntarily trust them with the info.

      --
      John
    31. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      You can disable remote management, but all it does is disallow access to your router when you are not on your home network. When you are plugged in to the router and access 192.168.1.1, you will still be required to use the internet to manage your router settings. The router will redirect 192.168.1.1 to ciscoconnectcloud.com unless you unplug the modem.

    32. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 1

      Remote Management != Firmware Upgrade

      Most people do not enable remote management... Its not enabled by default.
      Most people do not disable the automatic firmware updates... which is a default enabled check box on the page/tab for upgrading firmware (which most people don't even look at much less change the settings.)

      Wrong. Remote upgrade is disabled when remote management is disabled (at least on my E4200). Both were enabled by default.

      And I know most (normal) people don't look at the settings on their gear, but the people here on Slashdot who might be all bent out of shape are the kinds of techies who should know better than to trust the default settings of anything they own.

      --
      John
    33. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Really? You know exactly? So you work for Cisco? If you do not work for Cisco then you do not know why it was done and should STFU.

    34. Re:Upgrade Instructions for STUPID OWNERS by aergern · · Score: 1

      Your parents must be in their 90's since mine are in their 70's and aren't as retarded as you portrait "old folks". But I guess being a young, up and coming hipster douchebag .. you have to get points and props where you can. I've met plenty of 20somethings who wouldn't know secure behavior if it walked up and bit them after they shared their lives on Facebook and through the Twitter machine. So yeah .. you jackwagon.

      --
      Tell me what you believe...I'll tell you what you should see.
    35. Re:Upgrade Instructions for STUPID OWNERS by cant_get_a_good_nick · · Score: 1

      The title of your post does not say 'anyone here'. It says STUPID OWNERS. 'Anyone Here' only makes it in the third paragraph of your post. The first paragraph is opinionated and makes no such restriction.

      We're pissed because they shouldn't have done this to anyone, not that we got hit. I have an E4200 (the first router that worked all the rooms in my house), a v1 which is not on the upgrade list. Remote management and uPnP were the first things turned off. But though I'm set, i'm generous with my knowledge, and now I need to go ask members of my family what they run so they're not hit. I am upset about this.

      If I read your new intent correctly, we should *not* be outraged that our parents and non-technical friends are subjected to net control and net snooping by Cisco. Technical users, such as us that read Slashdot, should just know these things and adjust should never complain about a poorly designed product. Non-technical users, well, too bad, and are left on their own. I'm not sure how this is a better world than one where technical people rail against poorly designed products and try to get them changed.

      To continue my car analogy above, picture a car manufacturer (err, call it Tucker just to give it a name). In a Tucker car, the company is able to change how the car works at some point down the road. Tucker is able to change how the car drives, to potentially steer you to Tucker associated gas stations instead of the one you were going to. If the Tucker update then drove you off the road and into a fence, well, too bad, it was in the EULA. The Tucker would also be able to eavesdrop on your conversations in the car, and sell the info. You would be arrested if you talked about that parking meter you didn't need to pay for back there.

      So in your world, me knowing that Tucker can do such update is required, and to be mad about it is foolish. Me being mad that my mom's car was updated and she was forced to drive into Tucker restaurants is stupid, since I knew to turn it off in my car. Again, I'm not sure how this is a better world.

      Sorry to rail on so much about this, but this "blame the user" stuff gets me angry. We live in a complex world, one that existed only in the dreams of people 50 years ago. How much should a person be required to know before they can use the normal tools in society? Through the Internet, I can now be attacked by any person any place in the world, 24/7. By attacking controller software, Stuxnet made the jump from virus code to physical destruction. The human brain, on average, just isn't wired for that. Any improvements to tools to have sensible defaults that don't expose you is very welcome.

    36. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Lighten up Francis...

    37. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Yeah, and the other button on the GUI doesn't do shit.

    38. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      How else will they find the good porn?

      One url is enough, xhamster is all you need.......we'll maybe not you..........you sick sick bastard, that stuff you watch is just wrong.

    39. Re:Upgrade Instructions for STUPID OWNERS by nurb432 · · Score: 1

      And why do they have to lock us out of our own device?

      --
      ---- Booth was a patriot ----
    40. Re:Upgrade Instructions for STUPID OWNERS by nurb432 · · Score: 1

      We (collective we) hoped that we could trust Cisco to be trustworthy as well

      Trust no one.

      --
      ---- Booth was a patriot ----
    41. Re:Upgrade Instructions for STUPID OWNERS by cant_get_a_good_nick · · Score: 1

      At some point you need to trust someone. I can't build a car. I can't build a computer from sand. If you've seen the gentleman who tried to build a toaster himself, you realize building these things yourself is hard. Is open source the cure? There was an attempt at putting a root hack in the kernel sources. It wasn't detected by a security sweep, just that it hit a compiler warning (luckily it was never committed to source). The person who was given the code didn't realize it was a roothack at the time. There was a telnetd bug that was in the source for 20 years.

      And say, what if it wasn't a binary blob. What if I did get the code. My wife can't understand it. Neither can my uncle. Should they never use a router?

      Either we all go back to subsistence farming, or we need to trust someone other than ourselves. There is no other option. Yes, you will be disappointed at times, and we need to continuously fight to ensure quality both as buyers with leverage and having external agencies (read: government?) act on our behalf (and can we trust them with our interests?). But at the base, we need trust in others.

    42. Re:Upgrade Instructions for STUPID OWNERS by Em+Adespoton · · Score: 1

      Marketing Marketing Marketing

      Doesn't matter if it is useful data since Marketing believes that if they have enough data about you that they will be able to create the perfect ad to make you buy a product that you really are not interested in buying, yet.

      FTFY.

      Actually, it works both ways: Sales uses it to shape their demands for how the product is developed, too. Marketing just carries more weight.

    43. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      If it had been, I would have had no sympathy for you.

    44. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Are you a cisco stockholder attempting damage control here? Really, what's with the over the top devotion to defending the slimey actions of a huge conglomorate by diverting the blame to the users?

    45. Re:Upgrade Instructions for STUPID OWNERS by Kalriath · · Score: 1

      What software? It's the firmware on your router - it WILL have access to every URL you visit!

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    46. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Same. Have two E4200v2 routers, one for myself and the other for my parents. I have automatic updates unchecked, both have managed to avoid the "Cloud Connect" crap.

    47. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      E4200v2 firmware download link, latest pre-cloud version:
      http://download.linksys.com/updates/to0040829450.pdx/FW_E4200_2.0.37.131047.SSA

    48. Re:Upgrade Instructions for STUPID OWNERS by plover · · Score: 2

      Thank you, I appreciate the correction. And yes, it was trollishly written with a blame-the-user bent (at least when the user is a techie), and for that I apologize.

      I'm still arguing that the remote router is adequate for mom. She probably won't get hacked by owning it, and having Cisco keep her router up to date and working is probably a lot easier than having to manually go to her house to configure it. Cisco is somewhat (OK, just barely) trustworthy in that regard.

      And I believe that's your point: you think Cisco, or any corporation anywhere, is completely untrustworthy in that regard. You think they'll turn over anyone who connects to thepiratebay to the MPAA; that they'll get hacked and leak a million routers login info across the net; and they'll have your router start injecting advertisements into your port 80 traffic. Or to use your Tucker analogy, they'll give you a trick google front-end where every search takes you to the highest bidder's site. And you may be absolutely right about Cisco - their track record is piss poor in many ways relating to privacy, in lots of ways pertaining to marketing, and not very good in protecting data.

      But you have to trust a lot of faceless corporations to be on the net anyway. The NSA is already sucking a feed straight out of AT&T's backbone. Some ISPs have done web ad injections to their clients ("view the web through our frame and get a discount" kinds of arrangements.) The MPAA is already participating in bittorrents so they can monitor who is downloading their stuff. Your on-line privacy is already nothing more than a transparent illusion, and you should never think otherwise. So across that backdrop, how awful is it to let them take care of mom's router settings and maintenance?

      --
      John
    49. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Bingo!

      Plover will go down in history as someone who supported American Snooping on the early 21st century.

      That's worse than supporting the NAZI Final Solution in the mid 20th century.

    50. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      Ok, so you know these things. My uncle, who was a CFO for a Fortune 500 company, doesn't know. Is he stupid? No, he just is as clueless about firewall and remote management as you would be about FASB157 and how you need to restructure your portfolio to comply. Are you saying that he shouldn't be on the Internet?

      No he's not stupid but has no business with access to configure network devices, "Use" the Internet sure. If he is the CFO stick to playing with the money and leave the network devices to a trained engineer.

      I don't tell our CFO how to manage to company money and he doesn't tell me how to configure a router. Works well we both have a job to do.

    51. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      It wasn't "Remote Management", that pwned them, it was "Automatic Updates". Many people, even computer savy get pwned on a regular basis from Auto Updates.

    52. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      So who just plugs in a firewall/router and starts using it out of the box without changing the password and checking over all the settings?

      Two of my neighbours, which help me not go over my download quota. ;-)

    53. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      So who just plugs in a firewall/router and starts using it out of the box without changing the password and checking over all the settings?

      Under the Administration / Management tab, you'll find a radio button clearly marked "Remote Management", and beneath that settings for Remote Upgrade. The day I installed it I discovered remote management was enabled by default, so I immediately set it to disabled. I remember thinking "My god, that's f*ing stupid! Who would ever want to expose router management to the wild side?" Apparently this answers my question.

      Anyway, for anyone here who is outraged that their router has been pwnd by Cisco, SHAME ON YOU for not securing your own damn router yourself before hanging it on the intarwebs!

      Save it. You're not helping at all.

    54. Re:Upgrade Instructions for STUPID OWNERS by Anonymous Coward · · Score: 0

      I know exactly why Cisco did it, so they could remotely administer routers for "average users". That's not necessarily a terrible thing.

      My complaint is with technical people, such as the fine folks lurking here on slashdot, accepting any security device's defaults without checking them over. It's not like it requires arcane knowledge to look at the configuration screens; it just takes a mouse. You don't have to find a bunch of settings in a README.TXT file from some random website to know what you're looking for, or pull up a wiki page to explain what you're seeing. It's a button on a GUI screen that's clearly screaming out "LET SOMEONE ELSE RANDOMLY MESS AROUND WITH YOUR SECURITY", and these supposedly technical people left it checked. I clearly have no sympathy for them.

      Remind me to spit on your grave when you're dead.

  28. Cisco Exodus by Anonymous Coward · · Score: 0

    Working IT Security for a large global company, I can tell you that Cloud Connect would violate company policy immediately and exclude Cisco products from consideration for future projects. It will also prompt us to consider replacing Cisco equipment that has not yet reached end-of-life because our industry certifications require us to be on the latest manufacturer firmware. If we can't stay on old firmware we lose compliance. If we move to new firmware we lose adherence to security policies. Solution: replace all Cisco gear.

    1. Re:Cisco Exodus by Anonymous Coward · · Score: 0

      This is for consumer grade Linksys junk, not enterprise. Cisco may be dumb, but hopefully not THAT dumb

    2. Re:Cisco Exodus by JDG1980 · · Score: 2

      This is for consumer grade Linksys junk, not enterprise. Cisco may be dumb, but hopefully not THAT dumb

      Home users may not know that Cisco = Linksys, but network administrators do. And I don't think most people are going to be very confident that a company that already screwed over one large portion of its user base in this way wouldn't do the same to the other part if it thought it could get away with it.

    3. Re:Cisco Exodus by Anonymous Coward · · Score: 0

      Shows you where the management division inside Cisco are. This looks like the management of the consumer division is separate from the management of the enterprise division. Enterprise wouldn't let the upgrade infect their products, yet. Been there lived through that.

  29. buy soekris hardware instead of cisco hardware by TheGratefulNet · · Score: 3, Interesting

    get one of these hardware boxes:

    http://soekris.com/

    and run openwall (or whatever you want) on it.

    it keeps the money OUT of cisco's hands in both hardware and software. you can trust your hardware (no motivation to do evil spy things on generic pc style hardware) and you can trust your software. no one will force something on you, this way.

    my soekris box has been running non-stop (other than moves) for years, literally, 5 years or more. no blown caps, no blown power suplies, no 'china syndrome' electrolytics that are on ALL cisco, netgear, etc style circuit boards) and software that just plain works.

    tomato firmware (and similar) are cool, but they require vendor hardware and at this point, I'd just assume NOT give cisco ANY (!) of my money for any hardware of any kind.

    --

    --
    "It is now safe to switch off your computer."
    1. Re:buy soekris hardware instead of cisco hardware by pnutjam · · Score: 1

      Alix works well also, but the most inexpensive full featured routers I have been able to find are Mikrotik. They are not open source, but for about $45 I can get a router that supports 802.11 b/g/n, allows VPN's, and all sorts of good stuff.
      They are a bit harder to configure.

    2. Re:buy soekris hardware instead of cisco hardware by ppanon · · Score: 1

      Another vote for Soekris. I bought a Soekris box on sale a few years ago when they were clearing out an obsolete 486-era-based model. I've been running OpenBSD on it since with nary a problem. It's since gotten rebooted a couple of times for O/S upgrades and that's it.

      --
      Laissez lire, et laissez danser; ces deux amusements ne feront jamais de mal au monde. - Voltaire
  30. The problem is customer expectations by davidwr · · Score: 1

    Clearly, Cisco mis-judged customer expectations when introducing such a major change in the way routers behave.

    On another note, they could have provided similar functionality without the mandatory "Cisco Cloud:"

    When the user logs into the router the first time after the upgrade, the router could ask the user:
    * Do you want a Cisco-managed cloud and all its goodness, along with the down-side of providing information to Cisco that some customers would prefer to keep private?
    * Do you want a locally-managed cloud, running on a computer in your LAN that is "always on"? This will require installing software on a local computer.
    * Do you want classic behavior?

    AND - and this is important - allow the user to change his mind at any time.

    If I were running a business, I would NOT use the Cisco- or any-other-vendor-managed cloud without contractual assurances that company-related data, including technical data, would be protected from accidental leakage. In other words, if I want to outsource for cloud services, I'm going to want a business-grade contract and expect to pay accordingly.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  31. Boycott Cisco by Openstandards.net · · Score: 2

    The last time I posted how Cisco uses their routers to sell our privacy people responded that they were just complying with laws, which I question deeply because of the EXTENT to which they improve and market their eavesdropping capability, and how they constantly boast having a lead in the market in this area, appearing to go far beyond the law.

    Now we have this? Really? Someone care to argue they are just complying with CALEA to avoid being sent to guatanamo bay?

    1. Re:Boycott Cisco by Scholasticus · · Score: 1

      All right, I'm in. Just on principle, I'm not buying any more Linksys/Cisco hardware until this gets reversed. On the slightly brighter side, this looks like multiple class action lawsuits waiting to happen.

    2. Re:Boycott Cisco by GodGell · · Score: 1

      The last time I posted how Cisco uses their routers to sell our privacy ...

      Wait, what?

      I was shocked when I heard of this whole fiasco, and quickly went to check whether my WRT54GL had automatic updates turned on (it doesn't even have the option, thankfully). Beyond that, I thought that not downgrading to this new version will suffice. But you seem to be implying that there is already spying going on in Cisco routers, care to elaborate? I've never heard of this, I thought it to be impossible (what on Earth happened that there was no riot?), but if there really IS some legally-mandated backdoor in Cisco routers, I sure as hell am not going to let it run their firmware!

      --
      [SHOW SOME LENIENCY TOWARDS ... I mean, FUCK BETA] Eat. Survive. Reproduce. GOTO 10
    3. Re:Boycott Cisco by grolschie · · Score: 1

      The last time I posted how Cisco uses their routers to sell our privacy...

      They do? I was not aware of this. Which routers? More info please.

    4. Re:Boycott Cisco by Kalriath · · Score: 1

      Cisco, not Linksys. IOS contains "Lawful Intercept" functionality which is what he's talking about. Also, not in routers, but switches. Whole different beast.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    5. Re:Boycott Cisco by GodGell · · Score: 1

      Lawful intercept, what the flying fuck, that kinda shit already exists? :O We're far more boned than I thought.

      My Linksys has a glowing(!) Cisco logo on it, so I figured it's not too big of a stretch to lump them under the same umbrella. :)

      Still, now that I know about this I'm going to install some 3rd party firmware just in case...

      --
      [SHOW SOME LENIENCY TOWARDS ... I mean, FUCK BETA] Eat. Survive. Reproduce. GOTO 10
    6. Re:Boycott Cisco by Kalriath · · Score: 1

      Oh yes. And the LI stuff exists in Juniper, Array Networks, and all other kind of expensive carrier grade shit too. Cisco's the only one which at least publishes specs on how their lawful intercept stuff works!

      Unfortunately the US government mandates that providers of carrier grade ISP equipment build in this shit. Blame CALEA.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  32. Short-term thinking by JDG1980 · · Score: 5, Insightful

    This is typical of the short-term thinking that is all too common among corporations today. They're throwing away their credibility with professional users – you know, the ones who buy the expensive Cisco gear that generates most of their profits – so they can grab a few quick bucks by data-mining the consumer market. How many network administrators are going to hear about this and rule out Cisco for future consideration? Keep in mind that the silent and unprompted nature of the update implies that there already was a back door into the routers, even before this recent change. And I don't think that Cisco can cleanly separate its credibility in the home and enterprise markets, even if this is what they're planning to do.

    1. Re:Short-term thinking by captaindomon · · Score: 5, Interesting

      This is right on. The problem Cisco doesn't realize they have is that most of these cheap home routers are maintained by people that also make decisions for purchase on the enterprise side. When Grandma needs to buy a router, she doesn't buy one, she has her nephew (who is so cute and knows so much about computers!) to buy it for her. Her nephew also works in enterprise IT, in many cases. For a perfect example, read the Harvard business cases on Black & Decker, and how they tried to do the same thing and completely destroyed their brand name for professionals.

      --
      Just because I can hook a shark from a boat, I do no offer to wrestle it in the water.
    2. Re:Short-term thinking by silas_moeckel · · Score: 1

      Back door == automatic update checking? I would say there was nothing nefarious about how they got the update on there just what it did.

      --
      No sir I dont like it.
    3. Re:Short-term thinking by Anonymous Coward · · Score: 0

      Black & Decker case studies.

      I had not read about that. *cackle*

      Thank you!

      andy

    4. Re:Short-term thinking by Anonymous Coward · · Score: 1

      I'm an IT Manager and just OK'd about $120k of enterprise network equipment within the past month. A large chunk was Cisco. They have lost all credibility and trust with me and we will not be using them in the future.

    5. Re:Short-term thinking by couchslug · · Score: 2

      "For a perfect example, read the Harvard business cases on Black & Decker, and how they tried to do the same thing and completely destroyed their brand name for professionals."

      Great info! As an equipment geek, I thank you for that post.

      I wondered why they polluted their old line of gear with consumer shit.

      uwf.edu/hbettisoutland/Black%20&%20Decker.pdf

      --
      "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  33. Free Cisco Firmware?!? by Anonymous Coward · · Score: 0

    The first Cisco firmware to be released without a soul sucking smartnet contract, sucks your soul directly.

    1. Re:Free Cisco Firmware?!? by Minwee · · Score: 1

      The first Cisco firmware to be released without a soul sucking smartnet contract, sucks your soul directly.

      But... it comes with a free frogurt!

      The frogurt is also cursed.

      But you get your choice of toppings!

      The toppings contain potassium benzoate.

    2. Re:Free Cisco Firmware?!? by Kalriath · · Score: 1

      It's Linksys. Cisco IOS updates still require you secure the vacuum pipe to your company's IT budget.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  34. China Anyone by Anonymous Coward · · Score: 1

    Are you sure these updates weren't supposed to go to China?

  35. Class Action by Anonymous Coward · · Score: 0

    Remotely modify/destroy proprietary configurations on tens of thousands of consumer routers without customers' permission? Class action lawsuit time!

  36. FU Cisco.... by LVSlushdat · · Score: 2

    I set up networks for home/small business locally and have always recommended Linksys routers, along with Tomato firmware. I also come from a 20+ year background of network support, where I ALWAYS used/recommended Cisco. I was pretty happy when Cisco acquired Linksys, and until NOW, had been reasonably pleased with where Cisco was taking Linksys. THIS Orwellian crap by Cisco terminates ANY recommendation by me for ANYTHING from Cisco. Yeah.. I realize I'm but one, but from what I'm seeing here on Slashdot and elsewhere, this move by Cisco is gonna stop ANYONE with any brains from using/recommending Cisco in the future.. Hope it was worth it, you morons in the Cisco executive suite...

    Anybody got a source for used WRT54GL's?? (besides eBay, that is)

    --
    THANK YOU, Edward Snowden!! Americans owe you a debt of gratitude (whether they know it or not..)
  37. No more Cisco/Linksys products by Animats · · Score: 2

    I'll never buy another Linksys product. I don't want remote administration from the public internet side of a router.

    I already use Sonic.net DSL, one of the last of the independent ISPs - no filtering, no proxying, net-neutral, no quotas. Just bits.

  38. Unauthorized use of bandwidth by UnderCoverPenguin · · Score: 2

    I especially like how they get to keep your Internet history.

    This also means they are using bandwidth quota with out notifying the end users before doing so.

    --
    Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
  39. Cisco ASA by Anonymous Coward · · Score: 0

    F consumer routers/firewalls Cisco ASA. you can get them from amazon for near sub $300 bucks.

  40. How do u configure it if u can't access the cloud? by Anonymous Coward · · Score: 0

    Typically one cannot access the internet (cloud) before one has configured their router.

  41. Here are some alternatives. by Tufriast · · Score: 1

    Mac/Win/Linux compatible. For $100: http://store.apple.com/us/product/MC414 For $180: http://store.apple.com/us/product/MD031LL/A/AirPort-Extreme?fnode=MTY1NDA0Mg Easy to setup and configure. And nobody screws you out of your privacy. Great support staff too. I currently have an Extreme installed. It shoots out internets like the cannon on a warship.

    --
    Help me, help you. - Jerry McGuire
    1. Re:Here are some alternatives. by Anonymous Coward · · Score: 0

      Nope, sorry, these are HARD to configure if all you have is Linux and Android. Which is why I went with a Linksys.

    2. Re:Here are some alternatives. by spire3661 · · Score: 0

      Yeah, its totally Apple's fault that you use the least supported tools available.

      --
      Good-bye
    3. Re:Here are some alternatives. by nurb432 · · Score: 1

      Hard? I have yet to find a way of doing it.

      --
      ---- Booth was a patriot ----
  42. asus rtn66u by Anonymous Coward · · Score: 0

    get an asus rtn66u. supports tomatousb and is the best router on the market today.

  43. Firmware Roll Back by Anonymous Coward · · Score: 0

    I did a live chat with "Eva" at Cisco about this and she had Tech Support call me the next day. The tech I spoke to gave me a dropbox URL where I downloaded the previous firmware that came witht the router. He also attempted to explain why this was a "good thing".

    So if you are as pissed off as I was by this "upgrade" don't be afraid to get ahold of them and demand the previous firmware. What a bunch of idiots to push something like this on their customers. I am happy that they helped me to get back to the old firmware - but I will sure think twice about purchasing Cisco products in the future if this is the way they treat their customers.

  44. I wonder if we could organize a 'burn router day'? by TheGratefulNet · · Score: 2

    I remember when there was enough hate toward microsoft that we had protests in front of the MS offices (windows refund EULA events and such).

    there have been other protests with people carrying signs (etc) when we feel we've been wronged and need to make our view clear to the corps.

    I wonder if people feel bad enough about this to organize a day where we take our ciscos, bring them to some parking lot and destroy them. get the press to cover it and explain WHY we are doing it.

    maybe even do it in the parking lots of best buy, frys, microcenter and places that sell cisco gear to consumers.

    wouldn't that be grand?! imagine group 'burn-ins' (lol) where we destroy the cisco gear, thus saving unsuspecting end users from having to deal with this crap. and mostly it would be to make a statement and get some press coverage. unless there is public visibility in this, cisco won't be shamed enough.

    --

    --
    "It is now safe to switch off your computer."
  45. You didn't get the memo? by Grog6 · · Score: 1

    This is China West; just wait till the election.

    --
    Truth isn't Truth - Guliani
  46. Avaya VSP9k Woot... by cez · · Score: 1
    We just started rolling out a bunch of these:

    The chassis supports 240 10 Gigabit Ethernet ports[3] and is future-ready to support 40 Gigabit Ethernet and 100 Gigabit Ethernet interfaces.[4][5] The system also supports Shortest Path Bridging,[6] for network-wide service abstraction and orchestration (which may involve tens or hundreds of nodes), and Switch Clustering which delivers multi-device virtualization and high availability (typically deployed as pairs). This product can also maintain over 4000 VLANs and IP interfaces with support for up to 10k Static IP Routes, and an IP Forwarding Table capacity for 500k entries. Some more technological performance measures stack up as follows:

    wiki linky

    --
    Walk with Music;
    1. Re:Avaya VSP9k Woot... by scubamage · · Score: 1

      You know, i had no idea that Avaya made equipment outside of telecom? That looks like a pretty nice piece of kit!

  47. Oh the humanity... by Anonymous Coward · · Score: 0

    We must allow end-users to maintain control of their own router configs so they are still able to open PDFs emailed to them from unknown senders!

  48. improved security by Anonymous Coward · · Score: 0

    Isn't it funny how often things which are sold as improving security move control from individuals to some corporate entity, somewhere?

  49. Juniper SSG5 by jerpyro · · Score: 1

    You can ebay a Juniper SSG5 for under $100.

    It's WAY more router than you need for most home users, but it's full of awesome. You will need to use a cheap access point for wireless though (most of the geeks I know keep their access points separate from their routers anyway).

  50. Verizon has been doing it for ages. by 140Mandak262Jamuna · · Score: 4, Informative

    All routers supplied by Verizon for FiOS service has a WAN side log-in port open, and they install firmware upgrades and you can do nothing about it. If you want FiOS you have to let them do whatever they want with the bits coming of the router at their end.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:Verizon has been doing it for ages. by time961 · · Score: 1

      Be interesting to know how this feature is "secured", too. How hard would it be for J. Random BadGuy to connect to my FIOS router and replace its firmware?

    2. Re:Verizon has been doing it for ages. by Chuckstar · · Score: 4, Insightful

      This is different for two main reasons:

      1) Verizon is your ISP. They already see all your internet traffic. That's just the way ISPs work. Cisco did not previously have access to any information about your internet traffic (and, btw, considering their stated goals of their cloud system, there does not seem to be a reason for them to have access to it now).

      2) The problem is not automatic updates. It's the dramatic change in your relationship with Cisco and how your router operates that is the problem. Automatic updates, if they were just bug fixes and feature upgrades, sound like a good thing.

    3. Re:Verizon has been doing it for ages. by Cederic · · Score: 1

      I think many broadband providers do this - it's part of enabling them to provide a working service to their customers at lower cost. But this is why my provider provided "super hub" is set to "Cable Modem Mode" and merely provides a WAN connection through to my own personal router, which is fully under my own control.

      Asus n66u, and it's fantastic.

    4. Re:Verizon has been doing it for ages. by Anonymous Coward · · Score: 0

      All routers supplied by Verizon for FiOS service has a WAN side log-in port open, and they install firmware upgrades and you can do nothing about it.

      You can put a router that you own between Verizon's box and your network.

    5. Re:Verizon has been doing it for ages. by Anonymous Coward · · Score: 0

      All routers supplied by Verizon for FiOS service has a WAN side log-in port open, and they install firmware upgrades and you can do nothing about it.

      You can put a router that you own between Verizon's box and your network.

      Unless it's a Cisco!

    6. Re:Verizon has been doing it for ages. by meddle99 · · Score: 1

      All routers supplied by Verizon for FiOS service has a WAN side log-in port open, and they install firmware upgrades and you can do nothing about it. If you want FiOS you have to let them do whatever they want with the bits coming of the router at their end.

      Not all of them, mine allows you to disable the automatic firmware and remote management. I still did not trust/like their router and put my own between the FIOS ONT and their router. Basically, their router now sits in my DMZ and is pretty much nothing but a MOCA adaptor for the set top boxes.

  51. FUCK CISCO by Anonymous Coward · · Score: 0

    I've got the Cisco EA4500 and I AM FUCKING PISSED

  52. Yet another reason for by boweniant · · Score: 1

    DD-WRT (www.dd-wrt.com)

  53. Another no-no by ifnkovhgroghprm · · Score: 1

    It's also interesting that people who have installed the Cisco Connect software for configuring their routers, when they browse their router after it has installed the Cisco Connect Cloud version, the software is uninstalled from their PC.

    1. Re:Another no-no by Anonymous Coward · · Score: 0

      Most good malware has a self-destruct mechanism, doesn't it? ;-)

  54. SMOOTHWALL EXPRESS by d3ac0n · · Score: 1, Informative

    Um, why are you guys screwing around with consumer grade crap anyway?

    Take an old PC (Can even be a micro PC, provided it has more than one NIC) Put 2 NICs in it and install Smoothwall Express onto it.

    Since Smoothwall is a Linux-based open source operating system, the old PC will become a nice, easy to configure, open source firewall/router alternative system, and easily more powerful than the standard SOHO crap that Cisco is slinging.

    I've been running it for 10 years (with regular OS upgrades) on an old gateway 450mhz Pentium 2 PC. It's a trusty old warhorse that keeps on cranking and is WAY overpowered for the job. (Smoothwall will run on a 486DX. I know, I've done it.)

    How many crappy SOHO routers have YOU gone through in that time?

    --
    Official Heretic from the "Church of Global Warming". Proven right thanks to whistle blowers. AGW = Flat Earth Theory
    1. Re:SMOOTHWALL EXPRESS by contrapunctus · · Score: 3, Insightful

      I'm gonna guess that a router uses less electricity.

    2. Re:SMOOTHWALL EXPRESS by d3ac0n · · Score: 3, Informative

      I would imagine.

      Less privacy and control too. So which would you rather have, a slightly lower electric bill, or control of your internet history?

      Savings or freedom. Your choice.

      --
      Official Heretic from the "Church of Global Warming". Proven right thanks to whistle blowers. AGW = Flat Earth Theory
    3. Re:SMOOTHWALL EXPRESS by d3ac0n · · Score: 1

      As I noted though, you CAN use a low-powered "Micro" PC as long as it has at least two ethernet ports available. That will cut the power differential dramatically.

      I just find it easier to go with the older machine I already have.

      --
      Official Heretic from the "Church of Global Warming". Proven right thanks to whistle blowers. AGW = Flat Earth Theory
    4. Re:SMOOTHWALL EXPRESS by zoloto · · Score: 1

      what a farce. you have to turn on automatic updates for this to work anyways. When I set mine up it came that way, as an opt-in feature.

    5. Re:SMOOTHWALL EXPRESS by Drgnkght · · Score: 1

      Another good option is an old thin client. I use a re-purposed Neoware Thinclient for this. It runs embedded pfsense. Supports all sorts of functionality unavailable on most consumer-grade routers. As an added bonus it has no moving parts and is completely silent.

    6. Re:SMOOTHWALL EXPRESS by d3ac0n · · Score: 1

      What are you talking about? The Cisco or the Smoothwall?

      Smoothwall does not require you to update anything. I ran mine on ver.1.5 for 5 years. At that point 3.0 was out. Never force upgraded me or required me to do anything.

      Now, 3.0 DOES have a "cloudy" sort of feature to it, but it's completely optional. Just a freebie "value-add" thing. it's an open-source project, they know they can't get all control freak or they will lose their community.

      --
      Official Heretic from the "Church of Global Warming". Proven right thanks to whistle blowers. AGW = Flat Earth Theory
    7. Re:SMOOTHWALL EXPRESS by Anonymous Coward · · Score: 0

      I've been running it for 10 years (with regular OS upgrades) on an old gateway 450mhz Pentium 2 PC. It's a trusty old warhorse that keeps on cranking and is WAY overpowered for the job. (Smoothwall will run on a 486DX. I know, I've done it.)

      How many crappy SOHO routers have YOU gone through in that time?

      I've seen plenty of consumer routers that old or older, namely the WRT54Gs. Why do you think that's special?

    8. Re:SMOOTHWALL EXPRESS by Anonymous Coward · · Score: 0

      WTF, how is this modded informative? It's a false dichotomy. There is a plethora of routers supported by dd-wrt, OpenWrt, or Tomato. So, one can choose savings *and* freedom.

      - T

    9. Re:SMOOTHWALL EXPRESS by toddestan · · Score: 1

      You can always "upgrade" your old machine from a P2 to one of the early Coppermine "E" series P3 chips if its supported. The early Coppermine's run at about 13-15W TDP which is about half of the P2, which makes them a favorite of mine as far as re-purposing old computers goes.

  55. Looks like an opportunity to me! by time961 · · Score: 1

    What enables Cisco to DO remote management? And what ensures that no other entity in the world can remotely "manage" my router in the same fashion?

    What a great avenue this could be for malware distribution, intelligence collection, massive denial of service, etc. Be pretty cool for bad guys (or LE or TLAs) to be able to replace the firmware in millions of routers unbeknownst to their owners.

    Does anyone here know how Cisco's remote management interface is "secured"? Even if there's sound cryptography involved, there's always router software flaws, bad key generation, vulnerabilities in Cisco's upgrade servers, poor operational security at Cisco, and other avenues to attack the overall system. And of course the cryptography itself might be unsound, too... usually takes folks a couple tries to get that right.

    Wow.

  56. Untangle Server by Anonymous Coward · · Score: 0

    Similar to Smoothwall, I use the free version of Untangle server as my Gateway. The wireless router is connected on one of the switch ports and the Internet port is disconnected. The wireless router is being used only as an access point in this configuration and has no ability to communicate outside the LAN as it has no gateway address or DNS address set.

    A+, Network+, Linux+, Server+, CCAI, CCNA, CLA, LPIC-1

  57. Logitech Harmony by future+assassin · · Score: 1

    This is on par with Logitech's Harmony remote. I bought one a few weeks ago and did see the "must have intern access" label on it but I wasn't prepared to have a useless brick with no built in codes if I didn't have an internet connection. You'd figure it would contain codes the other 99% of univeral remotes out there or at least left me download a batch code file and load it up. On top of that I have to sign up, download software and only load up 4 codes at a time.

    Took me an hour of getting connection errors to finally get my codes in.

    Fuck yah....

    --
    by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
  58. Yet another reason by JohnFen · · Score: 1

    I realize that this is an issue with Cisco more than with the concept of the cloud... but this is exactly the sort of thing that makes me allergic to cloud services generally. "The cloud" means giving up freedom and privacy having to trust entities that continue to demonstrate how deeply untrustworthy they are.

    No cloud anything for me, thank you. I'm fine using my own private servers.

  59. Tech Support is tracking by Anonymous Coward · · Score: 0

    I called Cisco Technical support in the USA, and provided them the serial number for my EA4500. The rep. tracked my serial number to an IP address and determined I am using the router in Costa Rica and therefor she cannot help me. I need to contact the Costa Rica support.

    So Cisco is tracking my router, and geolocating my IP address and providing it to their support people

    Note: they didn't determine this from my phone number, my number is a voip number in the USA.

  60. THANK YOU CISCO... by Anonymous Coward · · Score: 0

    FOR creating legal grounds to sue the s**t out of you .... for making a very smart marketing move ... right when personal privacy is really sensitive stuff these days ... for giving other manufacturers - your most dangerous competitors - the opportunity to take your consumer base real easy... for not having a bloody clue as to what "dont piss the customer base" means ... inline with the brilliant decisions to buy and then kill very succesful consumer products, launch videochat products with no fear of overpricing and fetureless features or generally for making very sure that in the next shareholders meeting some very smelly stuff will hit the ceiling..... may I suggest purchasing a couple dozen tons of "Marketing for Real Dummies" ?

  61. Breach of US Law by Anonymous Coward · · Score: 0

    We've got a couple of angels in the US if they're tracking web history...

    It may be a breach of the standard computer fraud & abuse act if this hit any private/corporate/gov't systems.

    For the home users, it's almost certainly a breach of the video privacy & protection act -- just access a netflix or hulu (non https so it's captured) URL that you're paying for, and you'll have them on wrongful disclosure of video purchase or rental history.

    Fuck class action, I'll blow $25k for a 50% chance of a 50k reward if I can sell the rest of the profit rights to a law firm.

    But better still -- if a few people are willing to do that without class action, their lawyers won't have the time to fight the cases individually.

  62. Serial interface? by l2718 · · Score: 1

    Back in the day, it was possible to configure Cisco routers by attaching a VT terminal to their RS-232 interface. Perhaps users not wishing to use the "cloud" interface can configure this way instead.

  63. First They Came For Ciscos: PC-based Router by cmholm · · Score: 1

    I don't care about the subset of Cisco owner/licencees who are getting the shaft, because I use a PC-based router ( to nit-pick, a Mac mini ). But, as more and more of my devices come "smart" by default, I will .... might as well get a running start

    --
    Luke, help me take this mask off ... Just for once, let me butterfly kiss you with my own eyes.
  64. Cisco blog from VP/GM on this issue: by JohnEarnhardt · · Score: 1

    Cisco addresses this issue in a blog: http://blogs.cisco.com/home/answering-our-customers-questions-about-cisco-connect-cloud/ The blog states, in part: "Cisco prides itself on offering the best customer experiences, and privacy and security are at the core of everything we do. That goes for Cisco Connect Cloud too. When a customer signs up for a Cisco Connect Cloud account, personal information is used only to establish an account in order to provide customer support. Consistent with Cisco's practices, Cisco Connect Cloud does not actively track, collect or store personal info or usage data for any other purposes, nor is it transmitted to third parties. We also wanted to clear up any confusion about Cisco's `opt in' practices. Cisco Connect Cloud was delivered only to consumers who opted in to automatic updates. While we hope this reminder of our standard company practices will allay any concerns, customers who do not wish to establish a Cisco Connect Cloud account and would prefer to revert back to the traditional Linksys setup and management software can do so by calling the Linksys customer support line at 1-800-326-7114. One of our agents will walk you through the process."

  65. Re:I wonder if we could organize a 'burn router da by Anonymous Coward · · Score: 0

    Yes, from the television coverage:

    "This just in, Tom: a large group of computer geeks suffered respiratory distress in the downtown Microcenter parking lot, apparently from burning large volumes of some electronic device. We're not sure of their reason, but we're having an awful hard time finding someone who cares."

  66. Marketing blunder by tgv · · Score: 1

    Well, I am in the market for a new router, and guess which brand just fell of my list. Yes, we can vote with our wallets.

  67. Downgrade instructions have been released by grolschie · · Score: 1

    "Rolling back the Cisco Connect Cloud firmware to the Classic EA Series router web interface".

  68. Cisco is a surveillance / spying company by Burz · · Score: 1

    Their products have features like "SocialMiner" and of course "lawful intercept" -- which is the perennial code phrase used by a raft of corporations to denote their backdoor and MITM spying activities.

    https://www.networkworld.com/community/node/57070

    http://yro.slashdot.org/story/10/11/03/2137233/Cisco-Social-Software-Lets-You-Stalk-Customers

  69. Making it easier to choose by chrish · · Score: 1

    My Time Capsule recently died (awesome thermal design there Apple) and I've been looking for a replacement WAP.

    Thanks Cisco, you just eliminated about a million slightly different models for me. My pre-Cisco WRT54G has been a trooper though, that's for sure... it's slow for wireless these days, but it's still a great router (running a Tomato hacked up to do IPv6).

    --
    - chrish
  70. a few observations by Walt+Dismal · · Score: 1

    1. I smell the influence of a marketing person in all this, and not an engineer's decision. Although it's not out of the question that there was a government hand in it too.

    2. Am waiting for the new Drone Bus, an nnovation in public transportation where the bus gets driven by a remote drone pilot over a non-encrypted link. Because nothing could go wrong with that idea.

  71. Re:I wonder if we could organize a 'burn router da by Anonymous Coward · · Score: 0

    Cisco's headquarters is Building 10, 150 West Tasman Dr, San Jose CA 95134. John Chambers sits up there.

    I don't have an affected router, but I *DO* have an old Linksys that I could toss on the pile. Maybe not burn them, but walk by and toss them into a pile around that damned rock fountain.

  72. Re:Upgrade Instructions for Cisco 7204VXR by billstewart · · Score: 1

    The 7204VXR is not only safer and faster, but it functions as a space heater as well!

    I forget if it could handle IPv6 very well, though - probably depends on what interface cards you're using. My Linksys won't do v6, but it sounds like Iike I'm not going to want to upgrade its firmware any time soon.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  73. Think of all the criminal charges pending... by Anonymous Coward · · Score: 0

    They just *hacked* every device in that class ever sold... Massive multi-state criminal proceedings to follow. Cisco top executives expect prison time. Former cisco customers tell the judge to not allow lube.

  74. Cisco? by Anonymous Coward · · Score: 0

    Years ago I was looking for a solution to building a corporate network backbone. Looked at Cisco - of course, plus others. One day I went to a sales presentation for XYLAN. I saw a router that didn't care what was plugged into it as long as it could do standards based things. Saw one box with FDDI, Token-Ring, and Ethernet network blades happily routing away across networks. The box could have handled three more blades of whatever and still gotten close to wire-speed.
      Alcatel bought XYLAN, and I've been an Alcatel guy since then. Almost 15 years now. (Before that I was a Cisco guy.)
      No issues with any propitiatory bullcrap. Sure, there is some Alcatel-specific management stuff in the background, but still, never had an issue with anything software related, (Recently bought wireless solution and had to upgrade code on controller to open new licensing scheme, but it still worked before the update.)
      Anyway, Cisco Shmisco.

  75. Re:Upgrade Instructions for Cisco 7204VXR by burne · · Score: 2

    The 7204VXR is not only safer and faster, but it functions as a space heater as well!

    Barely. At 375W it's not enough to heat my spare bedroom, which is tiny (7x10'). I'd suggest you try a couple of 12K's loaded with STM-64 linecards so you can regulate heat output by enabling or disabling cards. Keep in mind that for maximum power output you need a loopback fiber to keep the lasers on at maximum power.