10:23 <sixwheeledbeast> https://arstechnica.com/information-technology/2020/03/openwrt-is-vulnerable-to-attacks-that-execute-malicious-code/

10:25 <bencoh> funny, I actually installed one last week and noticed they use plain http ...

10:26 <bencoh> "But Vranken found that it was possible to bypass the hash check by adding a space to the beginning of an input string in the checksum_hex2bin" . . . seriously?!

10:28 <sixwheeledbeast> People swear by it in the FOSS community so I imagine there will be a few out there, I have never run it.

15:29 <drathir> sixwheeledbeast: yea no https wide support s well known, but You most likely sysupgrade whole os...

15:46 <drathir> sixwheeledbeast: lucky some routers are fine with add https support...

21:57 <enyc> drathir: yes openwrt also just geterelaly warning not to use 4mb/16mb old limited routers etc etc

22:00 <drathir> enyc: and to be honest pretty sure openwrt its still much safe choice for such boxesthandefault abandoned fw...

22:03 <enyc> drathir: lots better than most vendor firmwares, for sure!

22:12 <enyc> drathir: I had an old AR7 chipset netgear-DG834v3 with openwrt 10.03.1 for ages....