Hot answers tagged

30

There is no generic way to check if a downloaded firmware is the original one. A vendor might provide tools for this or not. But a properly designed update process would already include that the firmware is signed and that the signature is checked by the router. This does not mean that the update process for your particular system was designed as such. For ...


6

You can check the firmware binary checksum, MD5 or hash and compare with the one published on the vendor download site. A checksum is a sequence generated after running a cryptographic hash function algorithm on a file. Calculating a checksum and comparing it with the one provided by the file source can be used as a file authenticity check method. If you ...


3

If you use a VPN, Tor or 100%1 HTTPS (w/o ignoring warnings) on your local machine to connect through the router to the internet than the attacker on the router cannot extract passwords or similar from your traffic and cannot manipulate the traffic. He can deny or delay the traffic though and in case of HTTPS he can at least see where you are connecting to ...


2

Some high-end routers support secure boot, for example: Juniper: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-os-overview.html#SecureBoot-350C8217 Cisco: https://www.cisco.com/c/en/us/products/collateral/security/cloud-access-security/secure-boot-trust.html


1

When using Tor the attacker can still control your path and in this way force you to use nodes he controls. So he can use traffic correlation attacks or just capture traffic at the exit node. Depending on the skill of the attacker he can acquire legit certificates and also get access to https traffic. With a VPN connection it depends on the security of the ...


1

I'll break your question down into two sections: The risks associated with using a malicious access point; and whether the type of router makes a difference. Risks associated with connecting to a malicious access point Connecting to a malicious access point can expose you to several risks. An attacker may be able to: Perform a man-in-the-middle attack; ...


Only top voted, non community-wiki answers of a minimum length are eligible