this post was submitted on 18 Dec 2024
322 points (97.9% liked)

Technology

60113 readers
2837 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
 

TP-link is reportedly being investigated over national security concerns linked to vulnerabilities in its very popular routers.

you are viewing a single comment's thread
view the rest of the comments
[–] NegativeLookBehind@lemmy.world 117 points 1 week ago* (last edited 1 week ago) (3 children)

We have this really great approach to security where we allow the adversary to infiltrate a huge portion of our infrastructure for years and at many different levels, and then we say "hm, maybe we shouldn't be allowing this?"

[–] BMTea@lemmy.world 45 points 1 week ago (1 children)

Almost like it has less to do with security and more to do with securitization of economic competition.

[–] Dark_Arc@social.packetloss.gg 26 points 1 week ago (1 children)

If you really think this is just about economic competition, you're very wrong.

The FBI didn't recommend using encrypted messaging apps because our infrastructure being compromised is no biggie.

These are computers manufactured by and in a foreign country that's expressed mutual hostility to the US. Computers follow instructions and manufacturers are in the best positioning to add custom instructions like "if you receive this instruction, brick yourself."

After the cyber attacks in the last decade people should realize crypto scammers aren't the only one's that have an interest in shutting down important infrastructure.

[–] eskimofry@lemmy.world 15 points 1 week ago (2 children)

This comment of yours immediately evokes the idea of the right hand that doesn't know what the left hand is doing.

The right hand is the security theatre that the west is showing its citizens against foreign adversaries who hack their devices and introduce vulnerabilities.

Meanwhile the left hand has been doing mass layoffs and moving manufacturing off-shore ever since the 60s and 70s and trying to fuck over it's own labour forces to make exponential profits.

Whats funny here is that you guys are bitching about "foreign adversaries" while also handing over the blueprints of your entire infrastructure to said adversaries without giving them anything valuable in return for their cheap labour cost and weak laws.

What did you expect to happen?

[–] Dark_Arc@social.packetloss.gg 8 points 1 week ago* (last edited 1 week ago)

The right hand doesn't know what the left hand is doing; that's just it you're right.

There's no conspiracy where the left and right hand have carefully coordinated this system or conspiracy to protect companies from their legitimate competition. We're not saying this about Taiwan or European devices (even though many of them are better than the Chinese and American devices) and that's kind of "case and point" that it's about more than the economy.

Basically the politicians just screwed up and didn't think through their decisions and effects of trusting a foreign power to do all this manufacturing for important pieces of infrastructure that "think" ... and now there's a problem.

[–] avidamoeba@lemmy.ca 7 points 1 week ago

Yes, this is what a capitalist, non-centrally-planned economy does. There are multiple hands and the hand of the capitalist class is often the strongest and it will do all the things you mentioned, while the gov't hand is trying to do damage control, but only able to the point where it hurts capitalists.

[–] Blackmist@feddit.uk 4 points 1 week ago (1 children)

Does it matter now? The alternatives are either Chinese companies, made in China, or filled with Chinese parts.

I'll give China credit, they've stitched everyone else right up, and we slurped it down because we're a sucker for cheap shit.

You can buy plenty of American made routers and other hardware that isn't quite as shady. But like you said, we love our cheap shit here, and don't give its malicious intent a second thought.

And no, it does not matter now, that's sort of my point. Pandora's box has been opened.

[–] LifeLemons@lemmy.ml -5 points 1 week ago (1 children)

Well its just natural for coubtries to do this at this point when they dont like each other

In an off topic, I often prefer a open hardware router like raspberry pi router as it gives me control! For me it's safer to use as documentation is open like pfsense and openwrt.

[–] avieshek@lemmy.world 1 points 1 week ago (1 children)

I don’t understand why doesn’t Raspberry Pi make a router when they’ve ideas like the 500 🤦🏻‍♂️

[–] avidamoeba@lemmy.ca 5 points 1 week ago (1 children)

There's already OpenWrt for Pi. All you need is to add a switch or a USB ethernet adapter.

[–] avieshek@lemmy.world 2 points 1 week ago (1 children)

I mean as a direct product that average people can directly buy instead of TP-Link.

[–] MITM0@lemmy.world 1 points 1 week ago (2 children)
[–] avieshek@lemmy.world 1 points 1 week ago

And now am asking Raspberry Pi itself like GL.iNet have~

[–] avidamoeba@lemmy.ca 1 points 1 week ago (1 children)

If anyone at the user level is concerned about backdoors, the OpenWrt One comes straight from AliExpress. 😂 With that said there's probably magnitudes less risk of something nefarious going on with a low volume machine built by Banana Pi than TP-Link.

[–] MITM0@lemmy.world 1 points 1 week ago

Along with Turris Omnia