Hacker News new | ask | show | jobs
by pdabbadabba 3613 days ago
They were causing interference because they could be (and were) modified to behave in a way that violated FCC regulations. So the FCC made another regulation that said devices should not be modifiable in that way. This seems totally sensible to me. TP-Link violated this rule--not just the "letter" of it.

Also, nobody has banned OpenWRT. If you read the consent decree, you'll see quite the opposite.

1 comments

> "Also, nobody has banned OpenWRT. If you read the consent decree, you'll see quite the opposite."

The FCC's initial knee-jerk reaction was very much along the lines of banning OpenWRT, and TP-Link subsequently deployed firmware to make it harder to put OpenWRT on their routers. Sure, they're now saying that it wasn't their intention and that they'll try to find a way to avoid it, but banning OpenWRT was and still is on the table and TP-Link and others have taken steps down that road.

As for the FCC rules: they still haven't put forth a clear explanation of how easy or hard the modifications have to be to get a router vendor in trouble. TP-Link's routers are still not fully secured, and just about everybody else still has routers on the market that are no more secure against modification than the TP-Link products. Absent any evidence of actual interference being traced to TP-Link products, it doesn't look like the FCC is merely being strict about enforcing their rules—it's more like they're making an example of TP-Link but deliberately withholding from a broader enforcement campaign while they and the industry try to figure out what to do (ie. can currently deployed hardware be made secure enough without locking it out of third-party firmware?). Meanwhile, the FCC is still having a chilling effect on open-source wireless router software and they still haven't provided any strong evidence that the harm is justified.

This seems like a long way of saying: "correct, nobody has banned OpenWRT, but the new FCC rules have made it riskier for manufacturers to support things like OpenWRT in the future."

To which I would mostly agree, with an important caveat: TP-Link's violation actually had nothing to do with allowing third-party software like OpenWRT. Its own UI allowed end users to change region settings. This seems clearly problematic under the Commission's rules, even if the rules are vague in other respects.

So, on balance, I think this order sends an important signal that very well may be able to support things like OpenWRT without getting into trouble. But you're right that we don't know that for sure, given the language of the decree. All we know is that the FCC would really like it if the industry could figure out how to support OpenWRT, etc. without simultaneously making it easy to circumvent FCC rules.

> This seems like a long way of saying: "correct, nobody has banned OpenWRT, but the new FCC rules have made it riskier for manufacturers to support things like OpenWRT in the future."

Nope. TP-Link has locked out OpenWRT. It's not a highly effective lock, but it is real and they actually deployed it as an update for existing hardware in the field and for new sales. They're not going to revert to the way things were and instead are trying to develop a new security strategy that clearly won't be feasible on the existing hardware that is now locked out.

And it's not like any router vendor ever actually actively supported third-party firmware; it's just a matter of how much DRM they use to interfere with it.

Ah. I see the disconnect here. "Ban" connotes a rule made by an entity in authority to prohibit something. So I had been thinking you were accusing the FCC of banning OpenWRT.

If you're saying that TP-Link has banned OpenWRT, I might quibble with your use of the word "ban," but I'd basically agree. (Maybe "block" would be better? I see that you yourself are shying away from saying that TP-Link actually "banned" anything, in favor of the phrase "locked out".)

Whether the FCC issues a clear and direct edict or if they merely intimidate the vendors into blocking third-party firmware, the effect for consumers is the same and the blame rests in the same place, so I don't think it's inappropriate to use the word "ban" to cover both cases. Until a large-scale commercial vendor of wireless routers stands up to fight on the side of open and hackable routers, the distinction is of no consequence.

Fortunately, the FCC might be backing down due to other sources of resistance and outcry. But that's not yet clear.