Firmware

laurennnnnn · 2019-03-13T04:10:37.499Z

what security procedures does the GL-AR150 have in place to protect its firmware?

kyson-lok · 2019-03-13T06:26:01.961Z

Not sure what you want. Could you please explain more details?

Johnex · 2019-03-13T20:46:27.856Z

First of all, the GL firmware is compiled C code and the source is proprietary. Qualcomm and other drivers that are also proprietary are included in the router firmware but no sources are available. Other files are stock OpenWrt and any changes are in the GL github for each firmware.

The V3 firmware checks some hardware id’s to make sure the device in genuine.

Firmware flashing does not have any checks apart from usual checksums, since the user can flash their own firmware. Automatic firmware updates could be intercepted in worst case, but the user can download the firmware from the GL site manually if paranoid and flash it manually.

Hope that helps

glitch · 2019-03-13T21:44:36.650Z

Johnex:

and firmware checks to make sure each device is valid. If the automatic check fails, the user must enter the serial number manually into the UI or access to the UI is denied.

Can you explain this more fully, as in my experience this is not the case.

Johnex · 2019-03-14T12:10:20.522Z

I updated my post, but this is the one i meant (it is not for genuine validation just for extra security on WAN, my mistake):

WeChat%20Image_20190314130810991×572 143 KB