The German government published at the start of the month an initial draft for rules on securing Small Office and Home Office (SOHO) routers.
Published by the German Federal Office for Information Security (BSI), the rules have been put together with input from router vendors, German telecoms, and the German hardware community.
Once approved, router manufacturers don’t have to abide by these requirements, but if they do, they can use a special sticker on their products showing their compliance.
Also: Cheat sheet: How to become a cybersecurity pro TechRepublic
The 22-page document, available in English here, lists tens of recommendations and rules for various router functions and features. We possibly couldn’t list all rules for this article, since some are really technical, but we selected a few of a greater importance:
- Only DNS, HTTP, HTTPS, DHCP, DHCPv6, and ICMPv6 services should be available on the LAN and WiFi interface.
- If the router has a guest WiFi mode, this mode must not allow access to the router’s configuration panel.
- The Extended Service Set Identifier (ESSID) should not contain information that is derived from the router itself (such as the vendor name or router model).
- The router must support the WPA2 protocol, and use it by default.
- WiFi passwords should have a length of 20 digits or more.
- WiFi passwords must not contain information derived from the router itself (vendor, model, MAC, etc.).
- The router must allow any authenticated user to change this password.
- The procedure of changing the WiFi password should not show a password strength meter or force users to use special characters.
- After setup, the router must restrict access to the WAN interface, with the exception of a few services, such as (CWMP) TR-069, SIP, SIPS, and ICMPv6.
- Routers must make CWMP available only if the ISP controls the router’s configuration from a remote, central location.
- Password for the router’s configuration/admin panel must have at least 8 characters and must have a complex setup involving two of the following: uppercase letters, lowercase letters, special characters, numbers.
- Just like WiFi passwords, admin panel passwords must not contain router-related information (vendor, model, MAC, etc.).
- The router must allow the user to change this default admin panel password.
- Password-based authentication MUST be protected against brute force attacks.
- Routers must not ship with undocumented (backdoor) accounts.
- In its default state, access to the admin panel must only be allowed via the LAN or WiFi interfaces.
- If the router vendor wants to expose the admin panel via WAN, it must use TLS.
- The end-user should be able to configure the port to be used for access to the configuration via the WAN interface.
- The router admin panel must show the firmware version.
- The router must users about an out-of-date or end-of-life firmware.
- The router must keep and display a last login log.
- The router must show the status and rules of any local firewall service.
- The router must list all active services per each interface (LAN/WAN/WiFi).
- Routers must include a way to perform factory resets.
- The routers must support DHCP over LAN and WiFi.
These are just some of the BSI recommendations, and you’ll find more in the above-linked document.
The reason why Germany is taking steps to standardize router security has something to do with an incident that took place at the end of 2016 when a British hacker known as “BestBuy” attempted to hijack Deutsche Telekom routers, but bungled a firmware update and crashed nearly a million routers across Germany.
The BSI’s efforts to regulate SOHO routers haven’t pleased all parties involved. In a blog post last week, the Chaos Computer Club (CCC), a well-known community of German hackers, has criticized the first draft of these recommendations, calling them “a farce.”
CCC said it attended the BSI meetings on this topic together with members of OpenWrt, a software project that provides open-source firmware for SOHO routers, and they say telecom lobby groups have put considerable effort into sabotaging the rules as a whole.
The two groups raised two issues that they say were not included in the BSI recommendations, rules that were of crucial importance.
Also: The best facial recognition cameras you can buy today CNET
One was that all routers should come with an expiration date for the firmware that must be visible to users before they purchase the device. Second, after the vendor stops supporting a model’s firmware, vendors should allow users to install custom firmware on abandoned and EOL devices.
Talks on the BSI rules are expected to continue. In October, the state of California passed state legislation that established a strict set of rules for passwords used by Internet-connected (IoT) devices, marking this the first IoT-specific regulation in the world. While Germany isn’t passing official laws, it will become the first country that tries to pass any kind of router-specific guidelines.
Related security coverage:
Toyota GR010 Hybrid racer rumored to spawn a street version
Toyota has a new racing car for the 2021 FIA World Endurance Championship. The vehicle is called the GR010 Hybrid and what’s more exciting than a new racing car is that reports claim a street-legal version will launch in the near future. The vehicle seen below is the 2021 GR010 Hybrid racing car, but it’s unclear what exactly the street-legal version might look like.
The racing car was built to meet the WEC series regulations, which only allow a single configuration. To perform at its peak on both low and high downforce tracks, the vehicle has an adjustable rear wing. Toyota does warn that the GR010 Hybrid will be slower than the TS050 racing car that it replaces.
The reason it will be slower has to do with regulations for the racing series. Toyota was forced to make the GR010 357 pounds heavier and 32 percent less powerful than the TS050 it’s replacing. The GR010 Hybrid is also nearly 10-inches longer, 4-inches higher, and 4-inches wider than its predecessor.
Toyota expects it will be about ten seconds slower at Le Mans than the TS050. Ten seconds is an eternity on a race track. Development took 18 months, and the car uses a gas-electric powertrain. The gas engine is a 3.5-liter V6 that makes 670 horsepower sent to the rear wheels. The front wheels get 268 horsepower from an electric motor-generator.
The total output is 938 horsepower. However, for WEC racing, total power is limited to 670 horsepower. We hope to learn more details about the street version of the car soon. The first race for the racing version will happen on March 19 at Sebring. Le Mas will occur on June 12, and the car will participate in other events during the season.
Some Ford Mustang Mach-E deliveries have been delayed
Ford has officially confirmed that it is delaying the delivery of hundreds of Mach-E electric vehicles to perform additional quality checks. A very limited number of Mach-E electric vehicles were delivered late last year. With Ford saying it was delaying deliveries to perform additional quality checks after delivering those vehicles last year, it’s easy to wonder if the owners of those vehicles discovered some issues.
Ford says that it is performing additional quality checks on several hundred Mach-E models built before dealer shipments started last month. The automaker says it wants to ensure the EV’s meet the quality customers expect and deserve. Ford took a beating on the new Ford Explorer’s launch when the vehicle launched with some significant issues that delayed deliveries.
Ford doesn’t want vehicles with issues to get into the hands of buyers again. Ford hasn’t confirmed an issue with the Mach-E, but it would seem odd to stop deliveries and conduct additional quality checks if there wasn’t some sort of suspicion of a problem with the quality of the vehicles.
It may simply be that Ford wants its new electric vehicle to be perfect. The delay could be something as small as checking body panels to be sure they’re appropriately aligned. There were some rumors that the EV didn’t charge as fast as expected, but it’s unclear if the checks have anything to do with the charging system.
We were able to spend some quality time hands-on driving the 2021 Mach-E last month. Anyone wanting more details on Ford’s new electric vehicle should check out our hands-on. Ford has a lot riding on this vehicle, and if it wants to compete with Tesla and other big names in the automotive market, it needs to get things right. Delays are certainly better than delivering vehicles that don’t meet expectations.
2021 Chevrolet Trailblazer Review – A very rational compact crossover
Times are tough if you’re in the market for a brand new all-wheel drive crossover on a severe budget, but the 2021 Chevrolet Trailblazer thinks it has the answer. Cheapest model in Chevy’s SUV line-up, its sticker price isn’t quite that attention-grabbing $19k by the time you add AWD, but even then it still won’t break the bank – just as long as you’re willing to put up with the Trailblazer’s compromises to get there.
As you’d expect, the Trailblazer owes many of its styling cues to the larger Blazer SUV. The proportions look more muscular and intentional than the overall dimensions would suggest, particularly the squinting headlamps atop a gaping lower front grille. The Midnight Blue Metallic of my test car wasn’t the most flattering shade, mind: brighter colors help emphasize the contrast sections, like the chrome and the chunky cladding.
In displacement-obsessed America, the Trailblazer’s 1.3-liter turbocharged three-cylinder engine is a kooky outlier: it’s easy to forget that, over in Europe and Asia, squeezing more out of thriftier sippings of gas has been the status-quo for many years now. Chevy’s three-pot gets you 155 horsepower and 174 lb-ft of torque, but the biggest surprise is that it’s actually the larger of the two engines the Trailblazer can be had with.
Standard is an even smaller 1.2-liter turbo, coaxing 137 horsepower and 162 lb-ft of torque from its three cylinders. It uses a continuously variable transmission (CVT), unlike the 1.3-liter with its 9-speed automatic. If you want all-wheel drive rather than power to the front wheels alone, you’ll need to cough up the extra for the bigger engine.
The 2021 Trailblazer FWD L starts at just $19,000 (plus $995 destination), making it less than half the average selling price of a new car in America right now. You’ll pay $3,100 more for the Trailblazer AWD LS 1.3L, the first trim offering the punchier engine and all-wheel drive. My review car was the positively-plush (in comparison) Trailblazer AWD LT, at $28,180 with options and destination.
Your money gets you 17-inch high-gloss black alloy wheels, front fog lamps and LED daytime running lights, power-adjusted side mirrors, electric windows, heated front seats, keyless entry and start, OnStar 4G LTE WiFi, a 7-inch infotainment system with wireless Android Auto and Apple CarPlay, and both USB Type-A and Type-C ports plus an aux-in. Safety tech includes lane-keep assistance, forward collision alerts, tire pressure monitoring, and automatic emergency and front pedestrian braking.
The $620 Adaptive Cruise Control package added the smarter cruise, leather wrapping for the shifter and steering wheel, a 4.2-inch color display sandwiched between the analog gauges for the driver, and a rear center armrest. Another $620 added the Convenience package, with single-zone automatic air conditioning, auto dimming for the rearview mirror, a 120V power outlet, SiriusXM, an 8-inch upgrade for the infotainment touchscreen, and rear USB Type-A and -C charging ports.
Finally, $345 throws in rear parking assistance, rear cross traffic alert, and blind spot warnings. There’s no leather option, only a leatherette upgrade from the perfectly satisfactory cloth, and weirdly no wireless charging pad available, strange since Chevy has been ahead of many by embracing wireless smartphone projection. You can even connect two Bluetooth devices simultaneously, which is more than many far more expensive SUVs can manage.
Out on the road, the 1.3-liter engine underwhelms. Acceleration is on the sluggish side, and though urban nippiness is reasonable the Trailblazer starts to feel a little more out of its depth on the highway. Put your foot down to take advantage of a gap in the next lane and there’s a disconcerting absence of grunt as the gearbox hurries to get you back into the power band. On Michigan highways, where a 70 mph limit typically means 80 mph in the slow lane, I held back from openings in faster traffic more often than I would in other small crossovers.
The same reticence appears on more interesting roads, where the Trailblazer fails to bring the fire. Squishy suspension makes some sense when you’re trying to smooth out unruly asphalt – though the short wheelbase and no lack of body roll means rougher sections still make themselves known – but does no favors for enthusiast drivers.
Perhaps, though, that’s asking too much. Economy works in the Trailblazer’s favor, with the 1.3L FWD rated for up to 31 mpg combined by the EPA, and my AWD version for 26 mpg in the city, 30 mpg on the highway, and 29 mpg combined. My mixed driving hit those numbers with no problems. The cabin design is unmemorable, with swathes of different tone plastic failing to lift what’s a generally dark interior, but it at least feels decently screwed-together and spacious.
25.3 cu-ft of cargo space with the rear seats up expands to 54.4 cu-ft with them down. Honda’s HR-V has more; Nissan’s Kicks has less. What the Chevy gets that neither rival offers is a folding front passenger seat, opening almost the full length of the cabin for hauling longer items. The HR-V and Trailblazer have more legroom in the rear than the Kicks does, too.
I don’t dislike the 2021 Trailblazer, I just struggle to remember it. The idea of a smaller, peppier version of the Blazer isn’t a bad one, and Chevrolet’s styling has some good angles, it’s just that this compact crossover doesn’t really go far enough in any direction to stand out of the crowd. Mazda’s CX-30 is in the same ballpark for price as this LT trim, but looks and drives so much better. The Trailblazer brings more practicality and cargo space to the party, but I know which I’d rather look outside and see parked on my driveway.
Facebook bans events near DC and state capitols over inauguration concerns
In light of safety concerns surrounding the upcoming US presidential inauguration, Facebook has decided to ban events on its platform...
What motivates the motivated reasoning of pro-Trump conspiracists?
Enlarge / January 7, 2021 – St. Paul, Minn. — Trump supporters gather at the Minnesota Governor’s Residence after a...
Toyota GR010 Hybrid racer rumored to spawn a street version
Toyota has a new racing car for the 2021 FIA World Endurance Championship. The vehicle is called the GR010 Hybrid...
Some Ford Mustang Mach-E deliveries have been delayed
Ford has officially confirmed that it is delaying the delivery of hundreds of Mach-E electric vehicles to perform additional quality...
Apple TV+ free trials extended again: What you should know
If you were one of the people who signed up for Apple’s lengthy one-year free trial of Apple TV+, you’ll...
Social11 months ago
CrashPlan for Small Business Review
Gadgets2 years ago
A fictional Facebook Portal videochat with Mark Zuckerberg – TechCrunch
Mobile2 years ago
Memory raises $5M to bring AI to time tracking – TechCrunch
Social2 years ago
iPhone XS priciest yet in South Korea
Cars2 years ago
What’s the best cloud storage for you?
Security2 years ago
Google latest cloud to be Australian government certified
Social2 years ago
Apple’s new iPad Pro aims to keep enterprise momentum
Cars2 years ago
Some internet outages predicted for the coming month as ‘768k Day’ approaches