Development issues regarding the cerowrt test router project
 help / color / mirror / Atom feed
* [Cerowrt-devel] OTA exploitable wifi bugs
@ 2022-10-13 16:59 Matt Taggart
  2022-10-13 17:14 ` Dave Taht
  0 siblings, 1 reply; 4+ messages in thread
From: Matt Taggart @ 2022-10-13 16:59 UTC (permalink / raw)
  To: cerowrt-devel

https://www.openwall.com/lists/oss-security/2022/10/13/2

Presumably openwrt and other router firmwares (FOSS and proprietary) 
will be effected?
Also android and maybe TVs, etc? That's a whole lot of devices.

Lots of updating in our futures... maybe this will help get newer SQM 
rolled out more (but maybe not enabled by default).

Sorry, this is probably my fault, I just updated a bunch of stuff last 
night (after I washed my car causing it to rain).

-- 
Matt Taggart
matt@lackof.org

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [Cerowrt-devel] OTA exploitable wifi bugs
  2022-10-13 16:59 [Cerowrt-devel] OTA exploitable wifi bugs Matt Taggart
@ 2022-10-13 17:14 ` Dave Taht
  2022-10-13 19:03   ` Etienne Champetier
  0 siblings, 1 reply; 4+ messages in thread
From: Dave Taht @ 2022-10-13 17:14 UTC (permalink / raw)
  To: Matt Taggart; +Cc: cerowrt-devel

yuck. 0 days suck. Why couldn't they have sat on this for a while?

On Thu, Oct 13, 2022 at 9:59 AM Matt Taggart via Cerowrt-devel
<cerowrt-devel@lists.bufferbloat.net> wrote:
>
> https://www.openwall.com/lists/oss-security/2022/10/13/2
>
> Presumably openwrt and other router firmwares (FOSS and proprietary)
> will be effected?
> Also android and maybe TVs, etc? That's a whole lot of devices.
>
> Lots of updating in our futures... maybe this will help get newer SQM
> rolled out more (but maybe not enabled by default).
>
> Sorry, this is probably my fault, I just updated a bunch of stuff last
> night (after I washed my car causing it to rain).
>
> --
> Matt Taggart
> matt@lackof.org
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
This song goes out to all the folk that thought Stadia would work:
https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz
Dave Täht CEO, TekLibre, LLC

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [Cerowrt-devel] OTA exploitable wifi bugs
  2022-10-13 17:14 ` Dave Taht
@ 2022-10-13 19:03   ` Etienne Champetier
  2022-10-13 19:05     ` Dave Taht
  0 siblings, 1 reply; 4+ messages in thread
From: Etienne Champetier @ 2022-10-13 19:03 UTC (permalink / raw)
  To: Dave Taht; +Cc: Matt Taggart, cerowrt-devel

Fixes already commited by Felix Fietkau in master and 22.03
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=26f400210d6b3780fcc0deb89b9741837df9c8b8
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=f1de43d0a045a154c74281bc60bf1c44c990071b

Le jeu. 13 oct. 2022 à 13:14, Dave Taht via Cerowrt-devel
<cerowrt-devel@lists.bufferbloat.net> a écrit :
>
> yuck. 0 days suck. Why couldn't they have sat on this for a while?
>
> On Thu, Oct 13, 2022 at 9:59 AM Matt Taggart via Cerowrt-devel
> <cerowrt-devel@lists.bufferbloat.net> wrote:
> >
> > https://www.openwall.com/lists/oss-security/2022/10/13/2
> >
> > Presumably openwrt and other router firmwares (FOSS and proprietary)
> > will be effected?
> > Also android and maybe TVs, etc? That's a whole lot of devices.
> >
> > Lots of updating in our futures... maybe this will help get newer SQM
> > rolled out more (but maybe not enabled by default).
> >
> > Sorry, this is probably my fault, I just updated a bunch of stuff last
> > night (after I washed my car causing it to rain).
> >
> > --
> > Matt Taggart
> > matt@lackof.org
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
>
>
>
> --
> This song goes out to all the folk that thought Stadia would work:
> https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz
> Dave Täht CEO, TekLibre, LLC
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [Cerowrt-devel] OTA exploitable wifi bugs
  2022-10-13 19:03   ` Etienne Champetier
@ 2022-10-13 19:05     ` Dave Taht
  0 siblings, 0 replies; 4+ messages in thread
From: Dave Taht @ 2022-10-13 19:05 UTC (permalink / raw)
  To: Etienne Champetier; +Cc: Matt Taggart, cerowrt-devel

They only shipped openwrt 22.03.1 yesterday...

On Thu, Oct 13, 2022 at 12:04 PM Etienne Champetier
<champetier.etienne@gmail.com> wrote:
>
> Fixes already commited by Felix Fietkau in master and 22.03
> https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=26f400210d6b3780fcc0deb89b9741837df9c8b8
> https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=f1de43d0a045a154c74281bc60bf1c44c990071b
>
> Le jeu. 13 oct. 2022 à 13:14, Dave Taht via Cerowrt-devel
> <cerowrt-devel@lists.bufferbloat.net> a écrit :
> >
> > yuck. 0 days suck. Why couldn't they have sat on this for a while?
> >
> > On Thu, Oct 13, 2022 at 9:59 AM Matt Taggart via Cerowrt-devel
> > <cerowrt-devel@lists.bufferbloat.net> wrote:
> > >
> > > https://www.openwall.com/lists/oss-security/2022/10/13/2
> > >
> > > Presumably openwrt and other router firmwares (FOSS and proprietary)
> > > will be effected?
> > > Also android and maybe TVs, etc? That's a whole lot of devices.
> > >
> > > Lots of updating in our futures... maybe this will help get newer SQM
> > > rolled out more (but maybe not enabled by default).
> > >
> > > Sorry, this is probably my fault, I just updated a bunch of stuff last
> > > night (after I washed my car causing it to rain).
> > >
> > > --
> > > Matt Taggart
> > > matt@lackof.org
> > > _______________________________________________
> > > Cerowrt-devel mailing list
> > > Cerowrt-devel@lists.bufferbloat.net
> > > https://lists.bufferbloat.net/listinfo/cerowrt-devel
> >
> >
> >
> > --
> > This song goes out to all the folk that thought Stadia would work:
> > https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz
> > Dave Täht CEO, TekLibre, LLC
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
This song goes out to all the folk that thought Stadia would work:
https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz
Dave Täht CEO, TekLibre, LLC

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2022-10-13 19:05 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-10-13 16:59 [Cerowrt-devel] OTA exploitable wifi bugs Matt Taggart
2022-10-13 17:14 ` Dave Taht
2022-10-13 19:03   ` Etienne Champetier
2022-10-13 19:05     ` Dave Taht

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox