Top
Best
New

Posted by todsacerdoti 11/9/2025

Drilling down on Uncle Sam's proposed TP-Link ban(krebsonsecurity.com)
279 points | 369 commentspage 2
BobbyTables2 11/9/2025|
Virtually every home router and a whole lot of small business routers should be considered “national security risks”.

TP-Link may be sore for getting singled out but they are certainly not unique.

ncr100 11/10/2025||
There are many many risks.

If TP-Link is pathologically creating unsecure products -- through incorporation of enemy government backdoors or through other improperly handled security vulnerabilities, they deserve to be singled out as making the problem worse and imposing potentially wild cost of risk-mitigation on others.

Similarly, AI (just speaking about current AI), and the reasonably-predictable future AGI / super-intelligences (remember: more than one!) will present humanity with Enormous risk, and we'll (humanity) have no choice but spend the unbounded cost to mitigate that risk.

froh 11/10/2025||
German avm fritz! is quite good at security maintenance.

are there us equivalents to them?

stefangordon 11/10/2025||
People worried about routers, meanwhile nearly every damn employee at Intel from the CEO to the janitor is Chinese.

The Intel ME chip is running its own OS on every single Intel chipset, even when the computer or laptop is shut down, and accessible directly through attached Intel WiFi or network cards. With full memory access, with no way to turn it off.

https://en.wikipedia.org/wiki/Intel_Management_Engine

The totality of reassurance we have about it is intel’s promise that they won’t put a backdoor in.

ncr100 11/10/2025|
Asking: Chinese the ethnicity, or Chinese the nationality?

And, why exaggerate?

I get the sense of concern for strategic vulnerabilities - I feel that is a valid, and a separate topic to ascribing cause / blame / hypothetical bases for solution-making.

ddtaylor 11/9/2025||
> The company says it researches, designs, develops and manufactures everything except its chipsets in-house.

So, the plastic bits?

hdgvhicv 11/9/2025||
Presumably the software, the boards, connectors, antenna design, etc.
tliltocatl 11/9/2025||
> connectors, antenna design

And also passives like SMD resistors. They are also refining copper and iron from raw ore. /s

thfuran 11/9/2025||
They actually make their own iron in the heart of a dying star.
R_D_Olivaw 11/9/2025||
They actually manufacture a synthetic star from which they gather their elements.
ehnto 11/10/2025||
That is an excellent scifi plot point, I would read that book.
seizethecheese 11/9/2025|||
As a hardware founder, low quality plastic is not rocket science. On trips to China I’ve heard similar things about other companies, specifically that Foxconn makes everything it uses, including things like coolant or plastic for prototype production.
permo-w 11/9/2025||
I don't think they were saying the plastic bits are rocket science, proverbally or not
MomsAVoxell 11/9/2025||
Does anyone know what their chips are doing? Do you, really?

Until we have desk side silicon fabrication/placement, with accompanying tunnelling microscope features, we simply cannot trust our silicon in any way other than through utterly peaceful means, which is to say, through systems of human trustworthiness.

Technology never allows us humans to advance sufficiently well to do without it .. unless it is evenly distributed.

Right now we are all at the mercy of the masters of silicon. This is no joke!

matheusmoreira 11/9/2025|||
Absolutely. We'll never be 100% free until we can fabricate computers at home, just like we can write our own software at home.
BobbyTables2 11/9/2025||||
Even with desk-side silicon fabrication, one would have to hope the hardware/software with the design tools wasn’t already backdoor-ed…
Meneth 11/9/2025||
Reflections on trusting trust...
ungreased0675 11/10/2025|||
You can measure input and output with commodity equipment. That will give a good, but admittedly incomplete picture of what the chips are doing.
ComplexSystems 11/9/2025||
I don't get what to make of this. Is it all just security theater? The idea of having consumer networking hardware that isn't riddled with security vulnerabilities seems to be a ship that sailed long ago. I doubt this move will prevent major nation states from hacking into whatever they want.
garganzol 11/10/2025||
TP-Link produces solid and affordable network equipment. A great value for the money, which makes their products a popular choice for many customers around the world. But as almost all hardware vendors out there, TP-Link has weaknesses in their software. In a way, they are victims of their own success and popularity. I wish them to get their software security act together.

Banning such a bright tech company is totally unwarranted, unless there are proofs of their intentional wrongdoings.

rs186 11/9/2025||
> the U.S.-based company’s products handle sensitive American data and because the officials believe it remains subject to jurisdiction or influence by the Chinese government.

These cowards have not yet finished banning TikTok

noitpmeder 11/9/2025|
Because Jeff Yass asked Trump not to
shmerl 11/9/2025||
OpenWRT is the way to go. If it doesn't run on it, I'd skip such router.
dangus 11/10/2025|
OPNSense on a dual NIC mini PC, the your WiFi comes from dumb APs.

Separating routing from WiFi has been the best thing I’ve ever done for my network.

shmerl 11/10/2025||
OPNsense is decent too. Problem is that running anything open on those AP will still be a mess unless they support something like OpenWRT ;)

Separating router from the AP was something I considered too for building a 10 Gbps network, since I haven't found any WiFi router that could also handle 10 Gbps wired without some accelerator chip requiring non upstream mess to work.

cflewis 11/9/2025||
I've been really happy with the TP-Link smart plugs. I keep upgrading them as The Latest Standard That's Definitely The Real One This Time Trust Us Bro comes out, and the Matter ones are excellent. Getting an instant response from them is really nice. I see no reason to buy others.

I would buy only Hue but that's because I have more money than sense, and they don't actually make smart plugs last time I looked, they make plugs but label them all as lights in the app, which is more annoying than it sounds.

The real problem to solve ditching TP-Link _routers_ is that all routers are uniformly fucking awful, and all you are doing is choosing your particular poison. This is especially true after Apple exited the game so long ago. I use Google Wifi because it mostly works most of the time, but that's not glowing praise. But the world has become trained that rebooting a router once a week and praying that it works when it comes back is a perfectly normal state of affairs and we couldn't possibly do this any better.

microtonal 11/9/2025||
I would buy only Hue but that's because I have more money than sense, and they don't actually make smart plugs last time I looked,

Ikea makes Zigbee smart plugs with power monitoring (Inspelning) that are ~10 Euro here (probably $10 in the US). Also Zigbee does not have all the security issues, since it is purely local and will talk with whatever hub/bridge you choose, e.g. Homey, Hubitat, or if you want to go free software Home Assistant or zigbee2mqtt.

It's somewhat insane to me that people use WiFi plugs for actuating things that actuate real-life electrical devices. Even more from companies that have a bad security reputation. Zigbee or Z-Wave all the way or possibly Matter over Thread, but the only Matter device that I had (an upgraded Eve Energy plug) has been a pain.

The real problem to solve ditching TP-Link _routers_ is that all routers are uniformly fucking awful, and all you are doing is choosing your particular poison. This is especially true after Apple exited the game so long ago.

I switched to Unifi gear (Cloud Gateway Max, two of their U7 access points, and a bunch of their managed switches) and they are a dream to set up. Making VLANs, associating VLANs with SSIDs, etc. is so easy. I had a TP Link managed switch and the interface was a huge pile of crap and I saved it several times after misconfiguration by virtue of it having a serial console. I only used it for two months or so because it was so frustrating.

hsbauauvhabzb 11/9/2025||
Iirc ikea zigbee range have been discontinued in favour of matter
microtonal 11/10/2025||
They just announced the Matter range, it isn't even in stores yet. I was at the Ikea store yesterday and they still had a good stock of Inspelning and most likely they will still have for a while (they only introduced it a year ago and it seems quite popular).

At any rate, Matter over Thread is still much better than WiFi security-wise (even though it's IPv6 routable) and Ikea's Matter over Thread plug will probably be similar price-wise. And the good thing is that probably even more people have a thread border router (Apple TV, HomePods, some Amazon Echo, Google TV Streamer 4k, etc.).

Still, these Ikea plugs are so cheap and Zigbee is extremely nice, so it doesn't hurt to buy and stock ten now for the future :).

add-sub-mul-div 11/9/2025|||
I have some TP-Link smart plugs and was happy with them for a long time because their app could be used without an account. Then I recently got the new version of the app and it forces an account, there's no more guest mode. I'm done with TP-Link now.
mrspuratic 11/10/2025||
The whole Tapo/Kasa interop thing was badly handled too a few years back. Put me right off, when most were dangling the seamless integration carrot to distract you from the vendor lock-in.
tom_alexander 11/10/2025|||
> all routers are uniformly fucking awful [...] the world has become trained that rebooting a router once a week and praying that it works when it comes back is a perfectly normal state of affairs

My OPNsense router currently has 74 days of uptime, and that's just because I ran an update 74 days ago. I've never rebooted it to solve a problem. The only wrinkle is OPNsense (and pfSense) is at least an order of magnitude more complicated than your average consumer router.

OTOH, my ubiquity access point reboots itself every time I change any setting at all.

dmoy 11/10/2025|||
> all routers are uniformly fucking awful,

The mikrotik I've been using has been pretty solid, and super super customizable.

iamacyborg 11/9/2025|||
Eve smart plugs are solid and don’t have any unnecessary cloud stuff.
throwaway173738 11/9/2025||
I bought a dedicated router and separate WAPs and cable modem and it works really well. The converged devices are terrible though.
bethekidyouwant 11/9/2025||
I don’t get the end game here D-link isn’t any better. Are we heading for isp enforced hardware in our homes?
imagetic 11/9/2025||
God help us.
kitd 11/10/2025||
Made by a company who's boss contributes to Trump's re-election campaign obv.
burnt-resistor 11/9/2025|
Per company government acquisition "bans" are stupid for PR and security reasons. Brand-specific banlists are whackamole when the same hardware and software will be immediately duplicated with another cat-walks-on-keyboard brand name that will disappear within a year.

Instead, there should be in-depth, enforced audit, compliance, and evaluation standards for gear for particular purposes. If it doesn't meet particular standard(s), then it can't be purchased or used.

More comments...