Shot: US considers banning TP-Link routers over cybersecurity concerns https://securityaffairs.com/172128/uncategorized/us-considers-banning-tp-link-routers.html

Chaser: Today, NY Times Wirecutter recommends.... wait for it... TP-Link routers, writing: "we’ve spent hundreds of hours testing and evaluating more than 110 routers, and we’ve determined that the best router for wirelessly connecting your laptops, your smart devices, and anything else your daily life depends on is the TP-Link Archer AX3000 Pro." https://www.nytimes.com/wirecutter/reviews/best-wi-fi-router/

Please tell me that I'm not the only one running SOHO enterprise/prosumer networking gear in my home...

@douglevin Gell-Mann Amnesia affects journalists themselves apparently

@douglevin I did for a while, but switched to TP link.

Regarding the potential ban, I think it’s stupid. All of this hardware is made over there, IMO by banning one manufacturer we are just going to push the usage to the next manufacturer who does the exact same thing. IMO this is much more shades of TikTok ban than Huawei/ZTE ban.

@douglevin Is it end-of-support? 😬

@wendynather Do I expose my management interfaces to the internet? No and no...

But ust did a spendy upgrade this year to stay (more) current with router and APs

@ajn142 If the threat of the ban forces consumer router manufacturers to prioritize security a bit more, it's a win in my book. IoT in general is a mess...

@douglevin Then it sounds like you’re good — at least compared with what appears to be the biggest target base

@wendynather For certain definitions of 'good' ;)

@douglevin Always 🌞

@douglevin that’s fair, I just don’t think that’s being leveraged as an incentive for improvement, just ineffective protectionism.

@ajn142 fair

@douglevin With OpenWRT or similar I'd think they'd be ok. Good to hear.

Unfortunately it seems the US is only targeting equipment from "foreign adversaries" (eg China). Hopefully the EU Cyber Resilience Act will target Western companies effectively.

@ericbranson No doubt, plenty of opportunity for everyone to uplevel baseline cybersecurity expectations for tech. In this case, systematic vulnerability in a product directly led to massive compromises - in the US and abroad.