Slashdot Mirror
Quanta LTE Router May Be Most Unsecure Router Ever Made (softpedia.com)
An anonymous reader writes: LTE routers made by Quanta Computer Incorporated, a Taiwanese hardware manufacturer, are plagued by over twenty major security flaws ranging from backdoor accounts to remote code execution bugs, from hardcoded SSH keys to undocumented diagnostics pages, and from weak WPS PINs to network eavesdropping functions. As the researcher explains: "A personal point of view: at best, the vulnerabilities are due to incompetence; at worst, it is a deliberate act of security sabotage from the vendor." The vendor has not fixed any of these issues even after almost four months.
The router equivalent of your recorded answering machine message, "Leave a message; we're in Disneyland and you're not!"
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
But at least it's locked down so you can't install any custom firmware and mess with the power levels!
A steel chain with twenty wooden links is still stronger than a steel chain with one paper link.
A router with no access control whatsoever is less secure than the given example.
Yes! You have complete power, and so does everyone else! It's all part of Quanta's new paradigm holding-hands sharing culture!
(Say... does anyone know how this /. shilling works? Do I just wait for my check now?)
How can I believe you when you tell me what I don't want to hear?
Isn't about time for manufacturers to face civil and potentially criminal penalties, plus recalls, for shipping insecure and faulty electronic products like every other product industry? Until is is less expensive to ship a secure (understanding that nothing is perfectly secure) product than it is to pay fines, penalties and recalls, vendors will continue to ship faulty and insecure products. Right now they know that it will cost them little to nothing to deal with insecure and faulty products so they do so with impunity and we get stuck with the crappy products in the end with the only possible recourse being an expensive class-action lawsuit that will take years and net those affected very little in the end. The class-actions tend to be very hard to win as there's very little case precedent for the owners of insecure products. People don't want to be the ones first to risk millions in legal fees and lawyers to set the initial precedence.
"Be particularly skeptical when presented with evidence confirming what you already believe." -
Based on how Quanta makes their router, I think you post your bank account information and wait for the money to come rolling in.
My sci-fi novel, Ghost Thief, is now available from Amazon.com.
Slashdot Headline May Be Using Most Unpossible English Ever Made
News at 11
You want the editors to do their jobs? That's unpossible!
My sci-fi novel, Ghost Thief, is now available from Amazon.com.
I'm all for language changing over time
Shush then.
"Insecure", to me, is far more commonly used to mean "lacking in confidence." If the editors had gone with that, there'd be dozens of posts mocking the choice and insisting that all the router needs is to be told it's beautiful.
Someone who is insecure has insecurities. Something which is unsecure does not have unsecurities.
"Unsecure" has come to take "insecure"'s place since "insecure" gained its psychological connotations (which may have happened around 1980, when "unsecure" started gaining in popularity). So blame psychiatrists.
systemd is Roko's Basilisk.
English does not really have many rules, and only descriptive not prescriptive dictionaries. You understood the writers intent, communication was successful. So I would say to you "get over it."
That said I agree your usage is preferable. The faulty device is insecure.
I don't think it would be wrong to say, "The house has been left unsecured."
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
Quanta routing is using Heisenberg's indetermination principle for routing, so their packets are either secure and insecure at the same time.
Good old newtonian routing policy can fix this.
From: https://pierrekim.github.io/bl...
Mar 15, 2016: Quanta confirms the product is EOL and the released firmware was approved by the operator. Quanta can't modify of change without the customer's approval. Quanta does not have plan to patch or change FW as the product is EOL. Quanta thanks Pierre Kim for the information and will consider the findings into our next product development in the near future.
So then the Vulnerability finder discloses, which is fine but the product is EOL. Don't buy it, don't use it. As a rule don't buy network routers from unknown or little known manufacturers. It may be cheap now but it'll cost you eventually.
Harrison's Postulate - "For every action there is an equal and opposite criticism"