Product Launch
anonymous
1 points
14 comments
Posted10 days agoActive5d ago
Slate AX
gl-inet.comlaunchedhardwaretravelers, remote workers
Key Features
Wi-Fi 6 supportGigabit Ethernetportable design
Tech Stack
Wi-Fi 6
Key Features
Tech Stack
It does work well as a travel router, and can pull north of 400Mbps over WireGuard.
Runs openwrt, but not upstream, so installing some packages can be a pain.
Still a great travel router, but had to buy a BerylAX for what I wanted to do with the usb gps.
1. Hotels where you have to pay a "connection fee" you only have to pay once
2. I travel with a chromecast that can connect to my private network
3. I run wireguard, so all my traffic back is automatically encrypted
4. I can position this to get a better wifi signal, "boosting" the signal (via my private network) for all my devices
Yeah especially when not travelling alone. Some places are really exploitative with this.
Even without a SIM card itself -- Android and iOS devices will tether over USB, so you can tether your own phone directly in and share the connection to other devices as well when you don't want to mess with Starlink.
A lot of this these "backdoor" style hypothesis' still need a motive justification for the cost. Who would they be targeting? What is the potential value of the backdoor?
Given the visibility and complex locations required for the firmware, this would be an expensive backdoor to put in place for any amount of time. The attack is completely untargeted, at best you may be able to say tech enthusiasts that travel. You probably can't count on executive targeting, this device requires a separate battery pack as well as per-site configuration as opposed to pairing to their iPhone and not carrying all that extra stuff.
What are the chances of an expensive, high-visibility backdoor showing up in a dirt cheap product line for a high-risk untargeted attack? Pretty low in my book but your threat model may vary.
It doesn't have to be targeted. The general demographic is a fantastic subject, and cheap affordable devices are a fantastic method. If one such trojan network device happen to end up in the home of an employee in a valuable position, or better yet in some office, an attacker has a chance to pivot further into a network.
They've worked well, except for one time when it seems as though they magically turned on IPv6: https://forum.gl-inet.com/t/incident-involving-ipv6-and-glin...
I wish I had dug deeper on that incident to determine how the configuration changed on those devices.
Is the CPU missing AES headers? (curious why OpenVPN is faster)
Not affiliated with Hacker News or Y Combinator. We simply enrich the public API with analytics.