* [Cerowrt-devel] Hmmm... Worth reading re router security
@ 2018-12-17 0:41 David P. Reed
2018-12-17 0:55 ` Dave Taht
0 siblings, 1 reply; 3+ messages in thread
From: David P. Reed @ 2018-12-17 0:41 UTC (permalink / raw)
To: Dave Taht; +Cc: cerowrt-devel
A look at home routers, and a surprising bug in Linux/MIPS - https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Cerowrt-devel] Hmmm... Worth reading re router security
2018-12-17 0:41 [Cerowrt-devel] Hmmm... Worth reading re router security David P. Reed
@ 2018-12-17 0:55 ` Dave Taht
2018-12-17 3:02 ` Dave Taht
0 siblings, 1 reply; 3+ messages in thread
From: Dave Taht @ 2018-12-17 0:55 UTC (permalink / raw)
To: David P. Reed; +Cc: Dave Taht, cerowrt-devel
Why is it so hard for a group like this to ALSO take a hard look at openwrt?
I don't recall what compiler was used for 18.06, but my kernel is 4.14
at least....
friends don't let friends run factory firmware. All that said, I have
no idea if present-day, prior-day openwrt currently addresses all the
concerns in this report, and I forwarded it to the openwrt-devel list.
I'd tried to get ahold of mudge and co dozens of times in the last 7
years. Glad they finally paid attention.
On Sun, Dec 16, 2018 at 4:41 PM David P. Reed <dpreed@deepplum.com> wrote:
>
> A look at home routers, and a surprising bug in Linux/MIPS - https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html
>
>
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
--
Dave Täht
CTO, TekLibre, LLC
http://www.teklibre.com
Tel: 1-831-205-9740
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Cerowrt-devel] Hmmm... Worth reading re router security
2018-12-17 0:55 ` Dave Taht
@ 2018-12-17 3:02 ` Dave Taht
0 siblings, 0 replies; 3+ messages in thread
From: Dave Taht @ 2018-12-17 3:02 UTC (permalink / raw)
To: David P. Reed; +Cc: Dave Taht, cerowrt-devel
The mips stack is not executable on this
-----------------------------------------------------
OpenWrt 18.06.1, r7258-5eb055306f
-----------------------------------------------------
root@edgerouterx:~# cat /proc/self/maps
00400000-0044c000 r-xp 00000000 fe:00 870 /bin/busybox
0045b000-0045c000 r-xp 0004b000 fe:00 870 /bin/busybox
0045c000-0045d000 rwxp 0004c000 fe:00 870 /bin/busybox
77ee7000-77f0a000 r-xp 00000000 fe:00 1014 /lib/libgcc_s.so.1
77f0a000-77f0b000 rwxp 00013000 fe:00 1014 /lib/libgcc_s.so.1
77f0b000-77f9d000 r-xp 00000000 fe:00 993 /lib/libc.so
77fa9000-77fab000 r--p 00000000 00:00 0 [vvar]
77fab000-77fac000 r-xp 00000000 00:00 0 [vdso]
77fac000-77fae000 rwxp 00091000 fe:00 993 /lib/libc.so
77fae000-77fb0000 rwxp 00000000 00:00 0
7f831000-7f852000 rw-p 00000000 00:00 0 [stack]
7ffff000-80000000 rwxp 00000000 00:00 0
On Sun, Dec 16, 2018 at 4:55 PM Dave Taht <dave.taht@gmail.com> wrote:
>
> Why is it so hard for a group like this to ALSO take a hard look at openwrt?
>
> I don't recall what compiler was used for 18.06, but my kernel is 4.14
> at least....
>
> friends don't let friends run factory firmware. All that said, I have
> no idea if present-day, prior-day openwrt currently addresses all the
> concerns in this report, and I forwarded it to the openwrt-devel list.
>
> I'd tried to get ahold of mudge and co dozens of times in the last 7
> years. Glad they finally paid attention.
>
> On Sun, Dec 16, 2018 at 4:41 PM David P. Reed <dpreed@deepplum.com> wrote:
> >
> > A look at home routers, and a surprising bug in Linux/MIPS - https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html
> >
> >
> >
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
>
>
>
> --
>
> Dave Täht
> CTO, TekLibre, LLC
> http://www.teklibre.com
> Tel: 1-831-205-9740
--
Dave Täht
CTO, TekLibre, LLC
http://www.teklibre.com
Tel: 1-831-205-9740
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-12-17 3:02 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-12-17 0:41 [Cerowrt-devel] Hmmm... Worth reading re router security David P. Reed
2018-12-17 0:55 ` Dave Taht
2018-12-17 3:02 ` Dave Taht
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox