From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qt0-x22e.google.com (mail-qt0-x22e.google.com [IPv6:2607:f8b0:400d:c0d::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id B6F223B2A4 for ; Fri, 23 Dec 2016 18:25:36 -0500 (EST) Received: by mail-qt0-x22e.google.com with SMTP id c47so271968158qtc.2 for ; Fri, 23 Dec 2016 15:25:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=67tFYZuyU3f6DSomEBuDX6cw3GlVDZCZzuOBIkJTPdM=; b=qNWek0RdMRszEHZCT1hLQin6t5G2IRm+XydzLW/5a1fxbfjajEVVz7TywiXwb0ZnH1 I9DGakFT7SaeN/iakO2YKBp+PXYhS2MRoZ8UtuyZSyHgk+yRmfRNgvUSbT7Sdi2dKwOm rl2Ux//xiycAtcbV/HL9hikDJthNtDPOW41KhJQKBeUcqXe+zKjj2K86MgQ5kAIsk2s4 aMV0ZY0KT3jhGQfhVOOc0BdcSBXQZEvk2FHB3jcGjhgkNYLrBMzP2SOc7mwS+2yZPAe0 0a2D3uix2ZjBHZKcrH/ZSQMrRaFGUTlHSiSKpyEzG/Sxr8SmbvaDXcCRaNuPx0afKfTF BjSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=67tFYZuyU3f6DSomEBuDX6cw3GlVDZCZzuOBIkJTPdM=; b=p7eCUNQZvR3ZXWEfJghUlp9DMYpOrgsLoVysBh9rz65b0bzhCLdRzENHw27DektSAR 3Ln8YfWvewcCZCpXW5XVui7nOn+KRGVtNc8L0hjMBPlN0AFaNtJz7ox5tnaNJvXKZKo9 JmCB3DfBOiMbDWJEQLf9jAv70fz3knEM3yxexuuNApIU8Vfk0TyUUPp6wblxu7BcJEE7 Osa8PW/5X3nGXejwETg5tJPQfy7XLMv8Wl5X3jtxMLYvFal9cAdwphshK3bCG96gpir7 vwjihPegHaScshGO+zw7MGU834UNzj+kQeeeXUloOffU1QdK+Bw4N8HPCU240t+4Adbv iWMA== X-Gm-Message-State: AIkVDXKEBIwOtz3llYBfzg5D/D6SdBsHLKFIuw6HnBzZjJo2sFCz4CtafnTlJp1E7mz67t3qbBb38z9bAECJ1Q== X-Received: by 10.200.57.134 with SMTP id v6mr16405394qte.36.1482535536092; Fri, 23 Dec 2016 15:25:36 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.152.197 with HTTP; Fri, 23 Dec 2016 15:25:35 -0800 (PST) From: Dave Taht Date: Fri, 23 Dec 2016 15:25:35 -0800 Message-ID: To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: [Cerowrt-devel] idea for getting cert alerts out there more widely X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Dec 2016 23:25:36 -0000 I think a cool thing people could do would be to have a set of stickers we could subversively apply to routers in a retailer as a LARGE WARNING LABEL pointing to the relevant cert alert - including steerage to a public firmware like lede that fixed the problem for that model. http://forums.theregister.co.uk/forum/1/2016/12/23/netgear_router_vuln/ I have no idea if this approach is legal or not, but it would be kind of fun to do in my next visit to frys, much like how ads for medicines are full of side effect notices.... --=20 Dave T=C3=A4ht Let's go make home routers and wifi faster! With better software! http://blog.cerowrt.org