Recent content by lenovomen

Yes, unfortunately I know, and that’s why I will use OpenWrt-compatible Xiaomi devices, but I will still write to customer support. The Chinese are very kind, their customer support is fantastic, and they always pay attention to customer feedback and act fairly.

Alright, I will write to customer support. But I am quite sad and angry, because this is my profession. And what about those who don’t understand it? No matter what security camera they buy, isn’t it possible that none of them will operate reliably if a network virus is able to manipulate the...

I have proof, but for security reasons I cannot disclose it! I’m sorry, but this was the last Asus router I purchased. In the future, I will choose Asian Xiaomi products instead, as I see them as more advanced at the moment.

Yes, I know that website. I tried to ask for help here first, but aside from that, I don’t care who develops the bootloader. It would be best if Merlin did it, since the new one would be completely reliable and downloadable from a single source.

This is not funny at all! It’s sad that a person in trouble cannot get any help! I can’t believe it’s so difficult to program a bootloader similar to Breed. I opened this topic for development purposes. I would be glad if, in the future, a malware-free bootloader became easily accessible for the...

I don’t want to ruin my router. 😄 I just expected a solution similar to OpenWrt with Breed.

Indeed, US laws also mandate similar access, primarily for national security and law enforcement purposes. For example, the FBI requests lawful access to devices, which functionally resembles a backdoor but is executed within legal frameworks.

Alright, it has a self-check system, but I assume it is not capable of detecting and fixing low-level sophisticated bootloader malware and viruses. I’d rather use OpenWRT with the Breed bootloader for IoT devices.

Dear everyone, I’ve solved this problem. I have a Chinese Redmi router for which a bootloader called Breed was developed. I installed it together with OpenWRT and connected this router to my infected Asus router. This way the IoT devices were isolated. I have to admit, in this respect the...

Of course, I’m not speaking against Merlin development! But it would be great if the core components were protected so that low-level attacks couldn’t be carried out. Or it would be nice to have a development, dear Merlin, that is able to check that everything is free from malware. That would be...

What exactly is that? I don’t understand in this context. Could you elaborate?

Or I don’t know! The real good direction would be what Xiaomi is doing. They put MJA1 hardware cryptographic keys into inexpensive everyday home-user devices to ensure proper firmware operation. Because many people like Asus routers and Merlin. I like them too, in fact! I wouldn’t even want...

Yes, I’ve already thought about it, that it would be better to buy an enterprise-level router. I was able to download the C700 camera firmware directly from Xiaomi’s website, which erased all partitions and even the bootloader, except for the factory.bin (which contains the MAC address and...

Alright, thanks, now I understand! To make sure everything is fine, is there any verification script or solution available? I really like the Merlin firmware, and I also have a Xiaomi C700 camera equipped with the MJA1 chip. I specifically wanted a model with a security chip, although...

I would appreciate if there were a possibility to repair it. Or if there existed a script capable of examining whether the bootloader contains any malicious code and ensuring there are no low-level attack codes that could bypass the system. github.com/NCSC-NL/asusrouter-malware-scan