Hacker News new | ask | show | jobs
by Abishek_Muthian 22 days ago
OpenWrt is a great piece of software(firmware) to prevent ISPs selling your browsing data to the advertisers. Although by now most ISPs are probably doing packet inspection.

It's easy to customize, I have a script to notify me when a new device connects to my router[1] and I also have a script to notify me when someone logins into my router[2].

Earlier I used to connect my openwrt router directly to the ISP's switch but now a days they've started to force their 'AI powered' router which is centrally managed. I now have to usee OpenWrt to defend against the ISP's router first and then the broader public network.

[1] https://abishekmuthian.com/openwrt-new-devices-connection-al...

[2] https://abishekmuthian.com/openwrt-login-alert/

1 comments

> OpenWrt is a great piece of software(firmware) to prevent ISPs selling your browsing data to the advertisers.

Huh, how? Either ISPs are doing deep packet inspection, and can track your browsing data regardless of what firmware you run, or they don't, and it still doesn't matter what firmware you use on your switches/routers, you ISP still won't be able to see TLS traffic, which most internet traffic is today.

How does deep packet inspection work on encrypted traffic?
Until there's more wide support for Encrypted Client Hello (ECH), the SNI header in the TLS handshake is always sent in plaintext. Between that an unencrypted DNS, most routers can easily spot/log what you're accessing in a browser.