Recent content by Deepcuts

Private IP 1st hop after your router means most likely you have a PPPoE connection. I would say impossible without PPPoE and a public IP (no CGNAT)

Cmon...'En masse' exploitation is going to be more difficult since valid credentials are required

Researchers at firmware and hardware security company Eclypsium discovered that hundreds of motherboard models made by Taiwanese computer components giant Gigabyte include backdoor functionality that could pose a significant risk to organizations...

Not sure where to put this. This sections seems to fit the bill. Have a separate gmail account for my car's Android head unit. Because the factory home app is a bit lacking, I have installed and purchased another one from the store...

Could not find anything regarding this issue on snbf. Sorry if this has been already posted. If you are using 3CX, take a look at

DoS protection on consumer grade routers coupled with usualy slow internet access is just marketing. Sort of like security in airports. There just to make you feel safer, but in reality does jack squat on top of large queues and unnecessary frisks.

Fun times for those using their products https://arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/

Question is: how did they come up with that 94% and 2 million? Ars states ~ 300k https://arstechnica.com/information-technology/2021/12/300000-mikrotik-routers-are-ticking-security-time-bombs-researchers-say/ Mikrotik never revealed how many routers sold in total (that I can find) so again...

Sell it or donate it to a kid without one.

Then RB4011iGS+5HacQ2HnD-IN will suit your needs with room to spare. I am using lots of RB1100AHx4 and I am happy with the performance (same CPU)

I really do not like TP-Link products, but if you already have the Archer, I would say stick with it. Should handle 1 Gbps up/down with ease. I would be more concerned with the client behind it and make sure it can handle such I/O loads.

I read "Improving DNS privacy" but in my mind, I actually read "we are working on a way to serve more ads and bypass corporate filtering" And to think there are people actually believing that somehow these "secure" DNS providers with their DoH and all the other acronyms are more trustworthy...

Yeah, also most of the same users will enable all rules under suricata and wonder why they have issues. Will also block inbund icmp because "security". All this while having no opened ports. Of course, with an i5 for maybe 100-200 Mbps max ISP speed :) Sorry to say, but pfsense, ipfire and...

Router Non-WiFi https://mikrotik.com/product/hex_s WiFi https://mikrotik.com/product/hap_ac2 Dirt cheap and powerful. Stay away from Cisco. Switch 8 ports +2 SFP+ https://mikrotik.com/product/css610_8g_2s_in

Sound like you want a Mikrotik router. It has a nice GUI, but you need to know networking to set it up. For extra oomph, if you have a decent server laying around, you can virtualize it with ESXi and a Mikrotik CHR license. (hint: CHR is free with full features for 60 days and the price for...