Ask Slashdot: Which Is the Safest Router?
MindPrison writes: As ashamed as I am to admit it -- a longtime computer user since the Commodore heydays, I've been hacked twice recently and that has seriously made me rethink my options for my safety and well-being. So, I ask you dear Slashdot users, from one fellow longtime Slashdotter to another: which is the best router for optimal safety today?
The unplugged one.
That's optimal safety, and minimal usability.
Your question is ill-defined anyways.
The disconnected one.
one to which you have the source code:
https://www.dd-wrt.com/site/index
This is a critical question - in what way was your system compromised? What vulnerability was exploited that allowed someone to access your machine? No single firewall or router can prevent all forms of compromise.
My current setup: OpenWRT on Turris Omnia. I've disabled Turris internal WiFi module (and installed a 4G PCIe LTE modem for a fallback connection) and I'm using TP-Link PoE wireless access points throughout my house. TP-Links are pretty well maintained, support VLANs and don't have any extra fluff.
Turris MOX is an upcoming project that will make it even easier.
The answer is that the wrong question is being asked. Any other answer is less than helpful and may prompt the one asking the question to continue down the wrong road to solve this problem. The second part of the answer is to ask how this person was actually hacked. Very likely, he did some not-too smart thing and needs to stop doing that in order to solve his problem.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
The Linux kernel is really just as secure as an OpenBSD kernel. You can also easily configure a distro with the exact same services and no more that would run on a default OpenBSD install.
As the GP pointed out, Linux distros need a bit of reconfiguration and expertise to do so. This is a common point of failure in the Linux based approach.
In contrast, OpenBSD's default configuration is minimal, just enough to do those core infrastructure systems like a router/firewall.
The problem is the human, not the kernel, which is why OpenBSD is often considered far superior for this specific task, a router/firewall. Few opportunities for human based errors.
Comment removed based on user account deletion