Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Network Networking Open Source Software Wireless Networking Hardware Your Rights Online

Linksys WRT Routers Won't Block Open Source Firmware, Despite FCC Rules (arstechnica.com) 113

The FCC requires all manufacturers to prevent users from having any direct ability to change RF parameters (frequency limits, output power, country codes, etc). The easiest way for a router manufacturer to comply with FCC's guideline is to block the open source router firmware -- which is what TP-Link has been doing. But thankfully, at least one router manufacturer doesn't think blocking the firmware is the right way to go about it. Ars Technica reports: Linksys has been collaborating with chipmaker Marvell and the makers of OpenWrt to make sure its latest WRT routers can comply with the new rules without blocking open source firmware, company officials told Ars. Linksys' effort stands in contrast with TP-Link, which said it would entirely prevent loading of open source firmware on its routers to satisfy the new Federal Communications Commission requirements. "They're named WRT... it's almost our responsibility to the open source community," Linksys router product manager Vince La Duca told Ars. Cybersecurity experts have urged the router manufacturers to not block open source firmware.
This discussion has been archived. No new comments can be posted.

Linksys WRT Routers Won't Block Open Source Firmware, Despite FCC Rules

Comments Filter:
  • Excellent (Score:5, Insightful)

    by Anonymous Coward on Friday May 13, 2016 @11:52AM (#52105907)

    Excellent decision. I know what my next router will be.

    • I dont know who down-voted you, but I agree with you.
    • Re:Excellent (Score:5, Insightful)

      by negRo_slim ( 636783 ) <mils_orgen@hotmail.com> on Friday May 13, 2016 @12:14PM (#52106113) Homepage
      While I'm not sure I'll go with Linksys, I am certainly disappointed I picked up a TP Link right before all this came to light. At least I can enjoy knowing that most people only buy TP Link to flash custom firmware and their foolish decision will most likely hurt their bottom line.

      I still don't understand what lead to all this, I highly doubt putting a few more milliwatts out or using a few MHz on either side of the allotted spectrum was causing much (if any) actual harm.
      • Re: (Score:2, Informative)

        by Anonymous Coward

        Don't be deceived, it's still possible to flash custom firmware on a TP-Link device even after all their work. You can find more information via search on the openwrt forum.

      • I still don't understand what lead to all this, I highly doubt putting a few more milliwatts out or using a few MHz on either side of the allotted spectrum was causing much (if any) actual harm.

        It's not like it's difficult to shunt the excess power to ground via a fuse of sorts. But it's definitely not cool if your mods cause interference... well, at least during peacetime.

      • Re:Excellent (Score:4, Insightful)

        by Anonymous Coward on Friday May 13, 2016 @12:46PM (#52106375)

        No. Fuck no. People are morons and we must not let people decide if it's OK to "[put] a few more milliwatts out" or using parts of the spectrum they're not supposed to. That's begging for localized shouting matches and overuse of allocated spectrum... where both are problems we already have.

        The FCC absolutely did the right thing here, and so is Linksys.

      • Re:Excellent (Score:5, Informative)

        by Solandri ( 704621 ) on Friday May 13, 2016 @01:10PM (#52106587)

        I still don't understand what lead to all this, I highly doubt putting a few more milliwatts out or using a few MHz on either side of the allotted spectrum was causing much (if any) actual harm.

        The "open" 5 GHz band spans from 5030 - 5835 MHz [wikipedia.org]. Right smack dab in the middle of it at 5600 MHz is terminal doppler weather radar [wikipedia.org]. That's one of the radars used to make the pretty rainfall pics you see on the news reports. More crucially, airports use it to detect wind shear conditions which have brought down several airliners [wikipedia.org] in the past.

        The problem is, because it's doppler radar, the frequency shift of the radar signal is crucially important, not just the return signal strength. So the FCC has carved out a band from 5250 - 5730 MHz and declared it DFS - dynamic frequency selection. Equipment can use these open frequencies, but if they do they have to monitor to see if weather radar is being used, and immediately shift to a different frequency outside this band if they detect weather radar.

        A few routers do implement this frequency shifting. The vast majority simply block out those frequencies in their firmware (which is why your 5 GHz channel selection is limited to channels 36-48 and 149-165). But most third party firmwares are made in countries which don't have airports with TDWR radar (in fact most U.S. airports don't yet), so their governing agencies don't restrict these frequencies, so the firmware authors make no effort to limit use of these frequencies. Loading the third party firmware onto a router in the U.S.allows your router to spam these frequencies indiscriminately, leading to TDWR possibly being unable to detect wind shear or detecting it later than it could have without the interference, possibly causing another airliner to crash.

        • by Anonymous Coward

          I have a brilliant idea. Let's put critical life/safety frequencies adjacent (on both sides) to frequencies we assign to mobile, unregulated consumer devices that number in the millions. What could go wrong?

          • Re:Excellent (Score:5, Insightful)

            by EndlessNameless ( 673105 ) on Friday May 13, 2016 @01:45PM (#52106917)

            There is finite usable spectrum, and Wifi had to go somewhere.

            Usable spectrum in this case means:

            * not absorbed by the atmosphere
            * reasonable effective range per unit power
            * harmless to organic tissues
            * capable of penetrating typical construction materials

            If you're aware of an unallocated band that you think the FCC has overlooked, feel free to contact them to ensure the oversight is corrected.

            • by Anonymous Coward

              I'm a WiFi doofus but I've always had problems reconciling those last two. :)

            • by epyT-R ( 613989 )

              maybe the wifi shouldn't have happened at all..at least not on that band.

            • Re:Excellent (Score:4, Interesting)

              by Solandri ( 704621 ) on Friday May 13, 2016 @04:37PM (#52108229)

              * not absorbed by the atmosphere

              Actually, 2.4 GHz and 5 GHz were chosen because they're absorbed more by the atmosphere. 2.4 GHz matches up closely with the resonance of water molecules (which is why microwave ovens operate at 2.45 GHz - they heat up food by pumping energy into the water molecules). And 5.6 GHz is absorbed readily by raindrops for some reason I haven't yet been able to learn (which is why it's handy for weather radar).

              Broadcasts on both bands thus attenuate more quickly relative to other frequencies. This not only makes them less useful for long-distance transmissions, but it makes them ideal for unregulated transmissions. The signal blasted by an unregulated device at these frequencies doesn't travel as far through the atmosphere, so the radius of its noise footprint is smaller compared to a different frequency. Basically, you can squeeze more devices closer together without interfering with each other at these frequencies. Both of these "features" make them ideal choices for open frequencies.

              • by Agripa ( 139780 )

                Actually, 2.4 GHz and 5 GHz were chosen because they're absorbed more by the atmosphere. 2.4 GHz matches up closely with the resonance of water molecules (which is why microwave ovens operate at 2.45 GHz - they heat up food by pumping energy into the water molecules). And 5.6 GHz is absorbed readily by raindrops for some reason I haven't yet been able to learn (which is why it's handy for weather radar).

                The absorption peaks for water and other gases in the atmosphere [wikipedia.org] are significantly higher than the 2.45

            • There is finite usable spectrum

              And here I thought the wave was analogue.

        • Re: (Score:3, Informative)

          by Anonymous Coward

          Excellent explanation. Visually, devices that interfere with TDWR displays appear as a wedge that is several degrees wide. The wedge obscures everything from the center of the display to the edge. Here's an example:

          http://fpvlab.com/forums/attachment.php?attachmentid=69438&d=1452686140

          • by Anonymous Coward

            Here's a thought, though, maybe a contrary opinion: with the huge number of wifi devices now, it's probable that even with no intentional misuse of channels, that some wifi devices will malfunction, either failing to do DFS correctly, or skipping onto the wrong channel; Shouldn't we maybe modernise the doppler radar, adding spatial diversity and time of flight characterisation to their systems.

            Cellular networks are all moving to SDMA and beam forming, 802.11ac accesspoints already incorporate spatial divers

        • by epyT-R ( 613989 )

          Radio is not reliable when shared, regulation or not. It only works when the players work together perfectly. When does that ever happen? It's like cooperative multitasking os's expecting applications to behave. It's a fool's game. If this radar is crucial, maybe we shouldn't share this band with consumer electronics. The FCC failed hard here.

        • by davecb ( 6526 )

          They seem to be use in a few locations in Puerto Rico, and were interfered with by non-wifi point-to-point devices. An image of a screen showed fixed straight lines a few pixels wide. Teapot, meet tempest.

          To be fair, one should arguably reserve that channel in countries that use these oddly low-frequency radars...

        • by Anonymous Coward

          I'm very familiar with DFS, but these rules seem highly restrictive. I buy a *lot* of Mikrotik outdoor AP/routers, and they all have the option to enable "SuperChannel" mode, which bypasses license control, and allows the radio to use all frequencies and power settings that it supports, including channels outside the ISM bands. I always understood that it is the operator of radio equipment's responsibility to ensure that they comply with all relevant laws and regulations. I have on occasion used SuperChann

      • The reason it's an issue is because in the typical race to the bottom, a combination of things is happening:
        1. Routers are more often being built using an SoC that includes (at least one) wireless chipset.
        2. Wifi cards are more often being built without builtin firmware storage, meaning it has to be loaded at runtime.
        Thus, you've got a device with a wireless chipset whose firmware is either stored along with the main firmware stoarge, or has to be loaded by the OS. Think of it like a computer where the e
      • What's the "Oregon Cost" in your sig? Is it really the Oregon Coast, or some other obscure reference?
    • . . . Asus?

      Cause Linksys isn't the only ones doing it and otherwise they are pretty shitty devices.

    • Re:Excellent (Score:5, Insightful)

      by danbob999 ( 2490674 ) on Friday May 13, 2016 @01:46PM (#52106931)

      The problem with the new WRT routers is that they sell for twice the value of comparable hardware from other vendors. And if you look carefully, you can find models which are just as good, if not better, in running 3rd party open source firmwares such as OpenWRT.
      The original WRT54G was cheap, that's why it succeeded.

    • by SeaFox ( 739806 )

      What's the point of custom firmware when you have to put it on crap Belkin hardware?

  • by Anonymous Coward

    The FCC rules do not mandate, either directly or indirectly, that OS firmware be blocked. Stop spreading this FUD.

    FCC statement [fcc.gov]

    • Summary (Score:5, Informative)

      by DrYak ( 748999 ) on Friday May 13, 2016 @12:22PM (#52106173) Homepage

      The FCC rules do not mandate, either directly or indirectly, that OS firmware be blocked.

      Which was already explained in the Summary.

      I know this is /. and nobody reads TFA, but you could at least read a little bit past the title and at least read the summary.

      A title has limited number of words and characters: "despide FCC rulins" is as mush as the author managed to cram into it.

      And the FCC *IS* causing most manufacturer to lock their firmware. FCC doesnt madante litteraly against opensource and user-upgradeable firmware, but the ruling is strict. No unlawful signal shall be emitted by a device. Under no circumstances.

      - Either a manufacturer has to jump through some complex hoops to find a solution which both open and user accessible (following the spirit of the GPL license used by some component. And litteraly following GPLv3) AND at the same time prevent the end-user from emitting signals that fiolated FCC rules (e.g.: emitting on a EU-only frequency in USA).

      - Or the manufacturer could just lock everything in a box, and only let cryptographically-signed firmwares in, and call it a day. (and hope no GPLv3 got violated in the process).

      Nearly every constructor goes for the latter. Only LinkSys Fritz and a few other go for the former

    • It literally says in the first sentence of the summary that the FCC rule requires that manufacturers prevent users from changing the RF parameters. There's no claim that the FCC rule says that you have to block OS firmware. It should be obvious to anyone that the easiest way to prevent users from changing the RF parameters is to block OS firmware (that's the second sentence of the summary, by the way), but the story is that Linksys is going to find another way to lock down the RF module without blocking O

    • by epyT-R ( 613989 )

      No, but the chip radio vendors are too cheap to hide the secret bits in the silicon, so the router vendors tivo the firmware...

    • Here's the exact wording of what the FCC required manufacturers to do before they can sell a device in the US. This is copy-paste from the FCC rule:

      Describe in detail how the device is protected
      from "flashing" and the installation of third-party firmware such as DD-WRT.

      After we wrote thousands of letters to the FCC, the wording was slightly changed. The practical effect is still that most manufacturers will in fact lock the firmware, because the FCC's requirements are mos

  • I certainly hope that the FCC does not begin enforcing this with fines and threatened jail time. Having the ability to install new firmware can improve the security of the device.

    Another thing to consider is that 2.4g is pretty much open game. You have to accept any interference that comes along in this frequency range due to its designation. The FCC should not care so much, as long as no one is putting out so much power that they are cooking meat.

    • Re: (Score:3, Interesting)

      by Anonymous Coward

      This action is not a violation of the FCC rule in question. That rule defined a chain of responsibility for purposes of assigning blame when and only when someone is using their wireless router beyond the scope of FCC approved frequency/intensity ranges.

      For a fine to come about, someone has to flash the firmware (easy it seems) with another firmware that does not respect the FCC mandated boundaries (I think that would require changing the source and recompiling for most of them) and then pick a frequency a

    • by SeaFox ( 739806 )

      I certainly hope that the FCC does not begin enforcing this with fines and threatened jail time.

      Threats of jail time for router manufacturers?

    • by Agripa ( 139780 )

      I certainly hope that the FCC does not begin enforcing this with fines and threatened jail time. Having the ability to install new firmware can improve the security of the device.

      Security of the device is not the FCC's concern. Interference to other operators is.

  • by Espectr0 ( 577637 ) on Friday May 13, 2016 @12:06PM (#52106025) Journal

    Firmwares that ask the country you are in. Choosing US greys out the appropiate sections. If clients lie, then the company shouln't be at fault.

    • Great. Then thousands of people could be violating FCC regulations due to ignorance or stupidity. Terrific idea.
      • They could put up a big warning when you change the values. Don't be so closed minded. All products already do in the manuals anyway (which nobody reads)

        The world is a lot bigger than the USA

    • by Agripa ( 139780 )

      Firmwares that ask the country you are in. Choosing US greys out the appropiate sections. If clients lie, then the company shouln't be at fault.

      That is how Ubiquiti handled it until the FCC went after them. Now Ubiquiti radios intended for the US market are locked to prevent this.

  • ... that some router manufacturers were going to do this?
    • by EvilSS ( 557649 )

      ... that some router manufacturers were going to do this?

      Because it's easier to just lock the firmware than go to the trouble to lock down part of the hardware. Linksys went out of their way in this case to meet the requirement and allow 3rd party firmware. Counter example is TP Link, who just locked their routers firmware.

    • by Agripa ( 139780 )

      Going to do what?

      The cost competitive nature of the consumer access point market is going to lead to all of the manufacturers doing this eventually. It will be less expensive for integrated radio hardware to support restrictions through the firmware so eventually that is how they will all work.

      • by mark-t ( 151149 )

        Going to do what?

        Allowing end-user updates to the firmware (ie, not necessarily only vendor approved firmware images), while not allowing the end user to make updates to power utilization or frequencies used by the on-board radio.

        I always figured that some might lock their firmware down entirely in response to the new regulations, but I also figured there would be some that wouldn't... and competition will probably drive virtually all of the manufacturers who would have otherwise allowed such end-user upg

  • by Anonymous Coward

    "doesnâ(TM)t"

    This makes Slashdot look like a shit-hole. Do you guys have no pride?

    • by epyT-R ( 613989 )

      support for that would turn this place into emoticon hell. Fuck that.

  • by Anonymous Coward

    The FCC rules do NOT, I repeat, do NOT forbid allowing users to adjust output power. Nor do they prohibit allowing users to change frequency.

    They do, however, prohibit allowing users to increase the power beyond that for which the device is type certified, or adjust the frequency outside the range for which it is certified. All type certified devices are allowed to operate at lower than the maximum output power.

    Also, the rules apply ONLY in the 5GHz U-NII band and NOT ANY OTHER BAND.

    If you actually read the

    • Here's the exact wording of what the FCC required manufacturers to do before they can sell a device in the US.
      > The nerd media has been misrepresenting this since day 1

      This is copy-paste from the FCC rule:

      Describe in detail how the device is protected
      from "flashing" and the installation of third-party firmware such as DD-WRT.

      AFTER we wrote thousands of letters to the FCC, the wording was slightly changed. The practical effect is sti

      • Ps, it is error to just read the part about "the purpose of this law is to ______" and then assume it does exactly that and nothing else, as you have done. The Patriot Act says "the purpose of this act is to protect Americans from terrorism ". That must mean it's a good law, right? Protecting people from terrorism is good.

        No, you actually have to read what the law REQUIRES. That's more important than its claims about WHY it exists. In this case, the FCC rule did explicitly require

  • Features (Score:5, Informative)

    by Frederic54 ( 3788 ) on Friday May 13, 2016 @12:59PM (#52106475) Journal
    I do not not install a 3rd party firmware to use channel 13 or crank power output, but for features:
    • Wireless bridge
    • OpenVPN client
    • OpenVPN server
    • Powerful QOS
    • IP traffic monitoring
    • IPv6
    • Multiple SSID
    • Full USB support (printer, HDD, 4G, etc)
    • VLAN
    • MultiWAN
    • etc

    All this on a $79 router.

    • Some devices are even cheaper. The ZSUN sdcard sharing adapter is only 11$ off amazon. It can run openwrt, meaning basically all of your listed features are possible (vlan not so much, only 1, unconnected, physical ethernet header).

      I has 2 wifi radios, so it makes a very cheap repeater, and has a reasonably fast internal SDCard slot, so it could do light duty fileserving. With a little hardware modification, it could do USB print serving as well. (Designed to be powered from a USB port, but is wired in h

    • WRT54GL? Can it do gigaspeed with these open source firmwares?

  • ability to change RF parameters (frequency limits, output power, country codes,

    Since when was a country code (up there in the datagram levels of the network model) a parameter of the radio frequency?

    I know that different ranges of properties are permitted in different countries, and those may be keyed by lists under country codes - but if that's what they mean they've chosen a really shitty way to express it.

"The vast majority of successful major crimes against property are perpetrated by individuals abusing positions of trust." -- Lawrence Dalzell

Working...