S4E12: "It's Getting Routey in Here"
|Previous Episode||Next Episode|
|S4E11: "SCADA isn't an STI"||S4E13: "Xmas in July"|
|Recorded (UTC)||Aired (UTC)||Editor|
|2019-07-24 02:33:11||2019-08-03 02:44:55||"Edita"|
We dig into ways to deal with terrible consumer routers.
Just the Tip
- Paden talks about the Parallel Dancer’s/Distributed Shell. Similar to the Dancer’s/Distributed Shell except it runs in parallel instead of sequentially (which means its runs go a LOT faster).
- Originally it was on Google Code.
Starts at 11m26s.
I was drinking another Victory Dirt Wolf. Paden was drinking Buckey Vodka. Jthan was drinking Miller Hi-Life.
Way back on June 16, 2019 we got an email from a listener, Ari Hamami:
Would love if you guys could discuss routers and security regarding routers in an episode.
Just had a bit of a hard time with spectrum because the routers that they hand out to people are shit.
Anywho, good routers from a security perspective and how to secure oneself if they are with a router like the aforementioned.
So here you go, Ari! As promised!
- Securing consumer routers
- ISP-provided kit is bullshit. Pure bullshit.
- The majority of consumer routers, regardless of reviews and quality of hardware, have terrible firmware.
- OpenWRT will mitigate a ton of your issues.
- “Leasing” the hardware from your ISP is a scam. Avoid it if at all possible.
- Alternatively, you can build your own router. We talk a bit about it initially in S0E11.
- UBIQUITI HARDWARE IS ASTOUNDING.
- Their “Unifi” WAPs are fantastic.
- Seriously, I cannot recommend them enough.
- Jthan is in the process of creating his router box.
- Paden mentions pfSense, which is almost as limiting as consumer firmware but on an x86_64 box. What’s the point at that point? You learn nothing and your control over the machine is crippled.
- We didn’t mention this on the air, but DON’T use a Raspberry Pi for this. They only have one NIC and all the connections share a bus.
In this segment, Jthan shares with you a little slice of life. The title is a reference to this video. (2m16s in)
Starts at 47m27s.
What extremes have we gone to for operations?
- Well, no, Paden, any PoE injector works for Unifi because the output, that connects to the Unifi, is PoE (either CAT5e or CAT6), which is a common and have a standard.
|Intro||The River||Rolemusic||click||CC-BY 4.0||Outro||Sweet Spot||Scanglobe||click||CC-BY-NC-SA 4.0|