<html><head></head><body style="zoom: 0%;"><div dir="auto">Hi David, <br><br></div>
<div dir="auto">The vendors I know don't roll their own os code either. The make their own release still mostly based from Linux and they aren't tied to the openwrt release process. <br><br></div>
<div dir="auto">I think GUIs on CPEs are the wrong direction. Consumer network equipment does best when it's plug and play. Consumers don't have all the skills needed to manage an in home packet network that includes wifi.<br><br></div>
<div dir="auto">I recently fixed a home network for my inlaws. It's a combo of structured wire and WiFi APs. I purchased the latest equipment from Amazon vs use the ISP provided equipment. I can do this reasonably well because I'm familiar with the chips inside.<br><br></div>
<div dir="auto">The online tech support started with trepidation as he was concerned that the home owner, i.e me, wasn't as skilled as the ISP technicians. He suggested we schedule that but I said we were good to go w/o one. <br><br></div>
<div dir="auto">He asked to speak to my father in law when we were all done. He told him, "You're lucky to have a son in law that know what he's doing. My techs aren't as good, and I really liked working with him too."<br><br></div>
<div dir="auto">I say this not to brag, as many on this list could do the equivalent, but to show that we really need to train lots of technicians on things like RF and structured wiring. Nobody should be "lucky" to get a quality in home network. We're not lucky to have a flush toilet anymore. This stuff is too important to rely on luck.<br><br></div>
<div dir="auto">Bob</div>
<div class="gmail_quote" >On Oct 11, 2023, at 3:58 PM, David Lang <<a href="mailto:david@lang.hm" target="_blank">david@lang.hm</a>> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="blue">On Wed, 11 Oct 2023, rjmcmahon wrote:<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> I don't know the numbers but a guess is that a majority of SoCs with WiFi <br> radios aren't based on openwrt.<br></blockquote><br>From what I've seen, the majority of APs out there are based on OpenWRT or one <br>of the competing open projects, very few roll their own OS from scratch<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> I think many on this list use openwrt but <br> that may not be representative of the actuals. Also, the trend is less sw in <br> a CPU forwarding plane and more hw, one day, linux at the CPEs may not be <br> needed at all (if we get to remote radio heads - though this is highly <br> speculative.)<br></blockquote><br>that is countered by the trend to do more (fancier GUI, media center, etc) The <br>vendors all want to differentiate themselves, that's hard to do if it's baked <br>into the chips<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> From my experience, sw is defined by the number & frequency of commits, and <br> of timeliness to issues more than a version number or compile date. So the <br> size and quality of the software staff can be informative.<br><br> I'm more interested in mfg node process then the mfg location & date as the <br> node process gives an idea if the design is keeping up or not. Chips designed <br> in 2012 are woefully behind and consume too much energy and generate too much <br> heat. I think Intel provides this information on all its chips as an example.<br></blockquote><br>I'm far less concerned about the chips than the software. Security holes are far <br>more likely in the software than the chips. The chips may limit the max <br>performance of the devices, but the focus of this is on the security, not the <br>throughput or the power efficiency (I don't mind that extra info, but what makes <br>some device unsafe to use isn't the age of the chips, but the age of the <br>software)<br><br>David Lang<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Bob<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> On Wed, 11 Oct 2023, David Bray, PhD via Nnagain wrote:<br> <br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"> There's also the concern about how do startups roll-out such a label for<br> their tech in the early iteration phase? How do they afford to do the <br> extra<br> work for the label vs. a big company (does this become a regulatory moat?)<br> <br> And let's say we have these labels. Will only consumers with the money to<br> purchase the more expensive equipment that has more privacy and security<br> features buy that one - leaving those who cannot afford privacy and<br> security bad alternatives?<br></blockquote> <br> As far as security goes, I would argue that the easy answer is to ship<br> a current version of openwrt instead of a forked, ancient version, and<br> get their changes submitted upstream (or at least maintained against<br> upstream). It's a different paradigm than they are used to, and right<br> now the suppliers tend to also work with ancient versions of openwrt,<br> but in all the companies that I have worked at, it's proven to be less<br> ongoing work (and far less risk) to keep up with current versions than<br> it is to stick with old versions and then do periodic 'big jump'<br> upgrades.<br> <br> it's like car maintinance, it seems easier to ignore your tires,<br> brakes, and oil changes, but the minimal cost of maintaining those<br> systems pays off in a big way over time<br> <br> David Lang<br><hr><br> Nnagain mailing list<br> Nnagain@lists.bufferbloat.net<br> <a href="https://lists.bufferbloat.net/listinfo/nnagain">https://lists.bufferbloat.net/listinfo/nnagain</a><br> <br><hr><br> Nnagain mailing list<br> Nnagain@lists.bufferbloat.net<br> <a href="https://lists.bufferbloat.net/listinfo/nnagain">https://lists.bufferbloat.net/listinfo/nnagain</a><br></blockquote><br></blockquote></pre></blockquote></div></body></html>