Never turn on remote admin. You don’t need to admin your router from outside of your house.
And if you absolutely do. Set up a VPN.
I heard that a while ago many VPN services were bought by the very people you use a VPN to protect against. How do you know which ones are safe?
I believe they mean setting up a VPN on your network, rather than buying a service from a VPN provider.
Something like Wireguard lets you configure individual devices to access your network remotely.
Yup, I did that last week and it’s pretty easy. Basically:
- Set up a VPS and configure wireguard
- Set up your computer to connect to it (or your router if you literally only want remote admin); you’ll probably want to configure persistent connections
- Set up your phone to connect to it
- Test it at work sometime to make sure it all works
I do it in two hops: connect to VPS then to internal computer. There are other configurations (e.g. talk to peer computers directly), but this works well for me.
This would be self hosted so you can access your own internal network. Wireguard on OpenVPN are your best options there, personally I use wireguard/pivpn.
Pivpn was discontinued just a heads up. I switched to just plain wireguard when I heard the news.
The way to tell which ones are safe is to look up legal history for each company. When the home country of the company demands all the data they have, the companies are going to give all the data they have. So if a court order of a VPN yields nothing or almost nothing, then you know they really don’t save any logs.
As someone else mentioned already, proton and mullvad are the good ones in, but that can change if either company gets bought out or changes management etc
Yes vpn all the way.
I use remote access software for my PC and VPN is the only way I can be safe.
That site… even the model list is an advertorial.
- XT8 (ZenWiFi AX XT8)
- XT8_V2 (ZenWiFi AX XT8 V2)
- RT-AX88U
- RT-AX58U
- RT-AX57
- RT-AC86U
- RT-AC68U
So glad my RT-AC86U kept having serious issues with the 2.4 GHz radio such that nothing would stay connected to the internet without 5 GHz support so I eventually trashed the damn thing after every solution failed.
Absolutely. Like why in the world would the article have a list of features included in each model of router?
I honestly forget the model I have, but I know the capabilities. I’m guessing that’s why.
It’s really too bad I’m unable to update my firmware until I agree to let ASUS sell my data.
Interestingly, I didn’t get any prompts. It did tell me to manually restart the router but once it did, no prompts. RT-AC68U running 3.0.0.4.386_51915
Thanks for the reminder to switch to merlin firmware.
Merlin has the problem that it doesn’t have something like like aimesh where you can auto synch the config between all your routers. I’ve got a network of three Asus routers and they work great and I can admin them like they’re one router, and I’d hate to have to give that to up.
Why do you have three routers? Even if you’re doing complex routing, you should be able to do it on one device.
The other two are in AP mode and are not running as routers.
Why not just buy APs?
Will that let you download speeds greater than 160 mbps? The last time I tried Merlin, the ASUS router I had wouldn’t download at full speed allowed by my internet connection?
I’m getting full speed (currently 290mbps on verizon 5g).
Anyone got a link to the vulnerability information? I’d like to try it out on my router just for fun.
Edit: found the CVE
According to the CVE it looks like my XT8 is already updated beyond the affected version. It says through version 3.0.0.4.388_24609 and mine is version 3.0.0.4.388_24621.
I also noticed this vulnerability was posted on May 29th with the last update being June 13th. Seems like this a report that’s already outdated.
Curious to know if this affects the DD-WRT style firmware as well?
Nah, those get their own, unique set of security issues, discovered or otherwise. Hint: every firmware does.
