USA Mulls nationwide BAN on TP-Link Products

OpenWRT users not affected by Salt Typhoon vulnerabilities. Could be a good opportunity to acquire cheap overstock, as TP-Link uses some decent hardware.

2 Likes

So what american brand 100% made in america they will have? All is from china lol.

1 Like

The concern is who owns the hardware designs and the software that runs on them. Sure, factory implants could exist, but it’s much more effort since the Chinese govt can’t just mandate what a USA company does to their gear.

These vulnerabilities create backdoors that could be leveraged by malicious actors

Nothing about hardware backdoors, only that tplink releases update or two before moving on to next bestseller.

1 Like

Same old story.

I remember when Bloomberg wrote about chip implants in server motherboards... and then it turned out to be a way to push one Asian company from US market.

https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies

Do you remember when they took hostage daughter of Huawei owner because US realized that American companies are losing 5G market?

Remember when acting US president threatened to destroy gas pipeline from Russia to Germany? What happened to German economy after that?

2 Likes

You are correct that many devices are produced in China, but China brand is not the same as American brand.

I worked in consumer electronics company in the past and my company had factory in China, the American brand will audit what software you put on those devices. So yeah even it's the same OEM you'll certainly see the difference.

2 Likes

Those 65% of households are free to get internationally made aftermarket firmware.

But only 0.01% of those households have a kid capable of flashing a router

7 Likes

Not after meeting granny for Christmas to tell what happens in the news outside minecraft

4 Likes

Everyone would expect FCC to release some audit report under normal circumstances. But circumstances are not normal...

Cant make it up

An unauthenticated user who can access the affected device from the LAN port or Wi-Fi may execute an arbitrary OS command on the device that has pre-specified target devices and blocked URLs in parental control settings


CVE-2024-21773

From the Forbes story:

"Beyond cybersecurity issues, the Justice Department is probing TP-Link’s pricing strategies, investigating whether the company’s practice of selling routers below production costs violates U.S. antitrust laws."

When you're not paying for the product, sometimes you are the product.

2 Likes

Is it the first router to have RCE? Using same logic Cisco should be investigated too, but in this case by Chinese government agency.

1 Like

Really, most routers with OEM have the same issues and this is the best video I've found that speaks to all levels of knowledge here; not too technical, not too dumbed down.

2 Likes

Lets be very friendly to openwrt tplink first-timers coming here after news scare.

3 Likes

Just wait and see, if USA as first Nato country do this then all the other Nato countries will soon follow! And that means EU will soon do this since EU is 100% Nato.

I guess the biggest problem with TP-Link is that their products actually work really good and they are cheap. Capitalism hate that, in capitalism everything are supposed to work really bad with short lifetime and it must be really expensive!

2 Likes

Yeah, "Linux is communism" MS CEO once said. NATO was created to destroy Red threat :laughing:

1 Like

That's not quite right. Austria, Cyprus, Malta and Ireland are full EU members but not members of NATO.
It's all a load of hot air anyway.

Hot air or not but one stroke of a pen reshapes US router market.

1 Like

Have you forgot about Huawei and ZTF, they got on the list and are already longe gone from EU and USA just because they are made in China.