Welcome to this topic on Dangers of Using Other People's Builds or "Learn and Use your Own BuildRoot"!
I'm the user who was almost banned for trying to make people aware of the dangers of using other people builds.
No I'm not trying to get attention or hijack the community builds category as one admin put it.
By using a simple tool called buildroot made especially for you, you don't have to rely on these 'firmware gurus' with their UNTRUSTED, UNVERIFIED BUILDS, which pose a serious risk to the security of your network.
Yes, this is exactly the same risk that you accept when you stick to using stock firmware instead of compiling your own from open source linux-based OpenWRT/LEDE.
What point is there to use a wiki tutorial to help you security harden some other guys build that you flashed to your router when you can do it on your own? By doing that you just threw security out the window in the first place then halfway back through the window (lol).
I am using this thread to start a discussion on the dangers of using other people's builds and why I believe this to be a serious issue on this forum.
Blindly using other people's builds has become a common trend among users that has dangerous wide-spread security implications in networks around the globe.
To let the unwary users in on this issue, I will repost my comments that were deleted in the topic Optimized build for the TP-Link C2600 / Netgear R7x00 / Linksys EA8500 in the community builds category in response to the creator of his "optimized build".
I am by no means an owner of this forum or "Guru" 4th party firmware (community-build) developer (aka sheep herder) but have been with OpenWRT since the early days (whiterussian not the "to save face remerger" so don't get cheeky jow). Listen, nothing personal. Take it with a grsin of salt. It's just an opinion.
I am and always will be a seriously devoted to network security issues as well as you all should be. I, by no means consider myself a black or white hat but aren't we all capable of being either.
Can you as a user of community builds based on OpenWRT be sure that what you are downloading and installing on your router is safe to use or free from security holes or "back doors"?
Well mine works and I know nobody logs in but me but do you? Sheeps can't know.
Consider this because your network is at stake.
We welcome all your input and support to educate people and become more aware of the dangers of using Other Peoples Builds or OPB for short.
My opinion here is only to stimulate discussion and open people's conciousness on the matter.
The point is to promote 'learning your stuff" while helping people to get away from a "sheep-like" or blind firmware flasher mentality.
I can't stress the "sheep" syndrome anymore than jow will let me!
P.S. I will not participate in this discussion as to not let people think that I'm hijacking the topic as the admin said to me in a private message with the intent of warning me to stick to the rules of "being nice" and "stay on topic' or get banned.
Make up your own mind about what this means to you.
Your opinion and contribution is important here whether you're for or against but I believe it's in the best interest of OPENWRT/LEDE in general to discuss this.
Thanks for being here and a big salute to all my OPENWRT/LEDE comrades and fellow new users and veteran users alike.