Lack of basic hardening features in home routers and especially MIPS routers

BoerenkoolMetWorst · Dec 26, 2018

We reviewed 28 popular home routers for basic hardening features. None performed well. Oh, and we found a bug in the Linux/MIPS architecture.
..In the first paper, we analyze the firmware images of 28 popular home routers, checking for basic code hygiene and software safety features. What we found was disappointing: none of the routers made consistent use of basic software safety features like ASLR, stack guards, and DEP - features which have been standard in desktop environments for over 15 years..
..In the second paper, we describe an unfortunate bug in the Linux/MIPS architecture which we encountered in the course of our reporting on routers. This bug, whose origins date back to 2001, prevents most Linux/MIPS binaries from enjoying the full protections of DEP and ASLR..
Click to expand...

https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html

TairikuOkami · Dec 26, 2018

None of those security features are hard or costly to implement, they just do not care, or maybe they do it on purpose?!

Log in or Sign up

Lack of basic hardening features in home routers and especially MIPS routers

BoerenkoolMetWorst Registered Member

TairikuOkami Registered Member

Log in or Sign up

Lack of basic hardening features in home routers and especially MIPS routers

BoerenkoolMetWorst Registered Member

TairikuOkami Registered Member

Useful Searches