[Cryptography] Severe flaw in WPA2 protocol leaves Wi-Fi traffic open to eavesdropping

Patrick Chkoreff patrick at rayservers.net
Sat Oct 28 15:57:04 EDT 2017


grarpamp wrote on 10/28/2017 12:01 PM:
>> From:  The eero team <support at eero.com>
>> Subject: Your network's been automatically updated
>>
>> To my delight, I just received [yet another binary blob] !
>> I gotta tell ya, that's just amazing.  It gives me the good chills.
> 
> As opposed to delight, others may rightfully find it
> amazingly, 'eer'ily, chilling, to be buying and using
> effectively closed source software, on closed hardware,
> that carries vital and private network traffic within their
> home, ...

I understand.  Ideally I would fabricate the device on a 3D printer from
open source specifications, and I would compile the firmware code on my
own machine.  I would also compile all the software used on my own
machine, including the operating system, drivers, and applications, from
original signed source code.  I would also compile "gcc" itself on my
own machine, and I would compile that using "clang", which I would also
compile from source.  I would cross-compile the compilers with each
other to verify reproducible builds.  I would want to print my own
machine using that 3D printer, and I might even want to print the 3D
printer itself using an already trusted 3D printer.  I would also write
the build script for all of the above in my own functional programming
language Fexl, which at some point would no longer depend on a C
compiler but would instead generate the ELF directly.

All of that is already on my TODO list, but other things keep coming up.
 Man I really need to manage my time better!


-- Patrick


More information about the cryptography mailing list