Wow, this is bad news not just for owners of pre-2014 TP-Link hardware but for the whole internet. When these devices get pwned, we’ll all suffer.
I’ve become a believer in the HTTPS-everywhere, VPN-in-public movement that says: never trust the infrastructure, it’s all broken.
Originally shared by Abraham Williams
https://threatpost.com/top-router-maker-tp-link-loses-control-over-configuration-domain/119072/
Or as Jim Gettys says, “Friends don’t let friends run factory firmware”
Nice, Henk, I’m going to use that one!