this post was submitted on 30 May 2024
477 points (99.8% liked)

Privacy

32028 readers
1159 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

ASUS rolled out an update to its firmware (3.0.0.6.102_34791) that now requires users to be over the age of 16 and to send a slew of metrics and data back to ASUS. If you do not agree or do not check the box to verify you are 16y or older, you cannot use the router. At this time, I’m not sure if ASUS has meant to disable the router for anyone under 16 or if it’s a bug.

You can opt out at any time but lose access to a slew of features:

Please note that users are required to agree to share their information before using DDNS, Remote Connection (ASUS Router APP, Lyra APP. AiCloud, AiDisk), AiProtection, Traffic analyzer, Apps analyzer, Adaptive QoS, Game Boost and Web history. At any time, users can search the contents of the terms at this page or stop sharing their information with other parties by choosing Withdraw.

Moreover, ASUS disables automatic firmware updates and worse, all security upgrades unless you opt into the data sharing. Security upgrades perform the following:

Security upgrade incorporates security measures that continuously update its security file and scans to protect against malware, malicious scripts, and emerging threats in order to secure the router and ensure system stability. Some upgrades addressing important security issues or meeting legal/regulatory requirements will still be downloaded and installed automatically, even if "Security Upgrade" is turned off.

Edit: I have personally contacted their CEO's office, but if others would like to voice their disapproval as well, here is a link: https://www.asus.com/us/support/article/787/

you are viewing a single comment's thread
view the rest of the comments
[–] fluckx@lemmy.world 4 points 5 months ago (3 children)

I guess I'm not updating my routers anymore then. Sucks though. It seemed to be the only Asus product that wasn't garbage.

[–] possiblylinux127@lemmy.zip 2 points 5 months ago (1 children)

Look into OpenWRT. It is more complex to setup but it is a Swiss army knife.

[–] PM_Your_Nudes_Please@lemmy.world 1 points 5 months ago

Sadly, many ASUS routers use Broadcom chipsets, which has major compatibility issues with openwrt. Notably, Broadcom has refused to allow open source drivers, and OpenWRT only uses open source. So installing any kind of OpenWRT on a Broadcom router will effectively cripple it, because even basic functions like WiFi will be unavailable due to the lack of drivers.

[–] ultratiem@lemmy.ca 1 points 5 months ago (1 children)

That sucks too because you miss out security fixes. I would rather run a secure and up to date firmware that leaks data to ASUS than one with known security exploits. If those were my only options.

[–] fluckx@lemmy.world 1 points 5 months ago

I'd rather update it as well. But the routers are behind my ISP router and aren't externally accessible. The attack surface is smaller in that regard. I'm not happy with the thought of an unpatched router. Maybe I can hold out long enough for merlin to support my routers.

I dont think the latest few updates I did mentioned any security updates. Only bugfixes.

I'll tackle the problem when it presents itself I guess.

[–] Lemmchen@feddit.de 0 points 5 months ago (1 children)

I'm sure asuswrt-merlin won't have this nonsense.

[–] fluckx@lemmy.world 2 points 5 months ago (1 children)

Routers aren't supported by merlin unfortunately :(

[–] Lemmchen@feddit.de 2 points 5 months ago (1 children)
[–] fluckx@lemmy.world 1 points 5 months ago

I mean my Asus router models aren't supported by merlin. Only 1 of them functions as an actual router.