urn:uuid:0f410ced-0b7b-5df4-af0b-a5c6e3ab3daf Daniel Aleksandersen https://www.daniel.priv.no/ Copyright © 2022 Daniel Aleksandersen. https://www.ctrl.blog/assets/logo/logo-square.svg 2022-10-15T12:23:00Z weekly 10 urn:uuid:411d5307-7d8f-4581-b275-e63be128dc69 2022-10-15T12:23:00Z 2022-10-15T12:23:00Z

No one remembers the IP address of their favorite websites. Why should you remember your router’s IP address? TP-Link hijacks DNS to give itself a domain name.

<p>TP-Link network products — including Wi-Fi routers, repeaters, and access points (AP) — use deep packet inspection (DPI) to intercept specific domain name system (DNS) requests. Each product looks for one or two domain names and will hijack the request to issue a local response containing its own internet protocol (IP) address.</p> <p><a href="https://www.ctrl.blog/entry/tplink-dns-hijacking.html">Read more …</a></p> urn:uuid:c4e5ee2d-3514-42bb-a27e-2760b2f37758 2022-09-04T14:01:00Z 2022-09-04T14:01:00Z

TP-Link Wi-Fi access points mindlessly band-steer clients off 2,4 GHz to the 5 GHz radio; even during periods when the 5 GHz radio is powered off.

<p>My TP-Link EAP653 Wi-Fi access point (AP) has some features that don’t work well together. Who would have thought that its proprietary extensions to the Wi-Fi standard would cause compatibility issues with clients?</p> <p><a href="https://www.ctrl.blog/entry/tplink-band-steering.html">Read more …</a></p> urn:uuid:c48ce01d-208e-4724-8113-c41550e9609c 2017-12-24T01:23:00Z 2017-12-24T01:23:00Z

TP-Link has issued firmware updates fixing its data-squandering NTP bug after my investigation. Devices won’t auto-update, however.

<p>The latest firmware update for TP-Link repeaters/range extenders saves their customers approximately 715 MB every month in unwanted internet traffic.</p> <p><a href="https://www.ctrl.blog/entry/ntplink-fixed.html">Read more …</a></p> urn:uuid:df2993b2-59e4-49a2-a2a2-d04c092082de 2017-11-24T03:12:00Z 2017-12-24T21:01:00Z

A design flaw in TP-Link Wi-Fi repeater firmware causes it to waste an excessive amount of bandwidth on NTP timekeeping. DDoS’ed public NTP servers in the process.

<p>You should probably avoid TP-Link products if you’re on a tight bandwidth budget. <strong>By design,</strong> TP-Link firmware sends six DNS requests and one NTP query every 5 seconds, for a total of 715,4 MB per month.</p> <p><a href="https://www.ctrl.blog/entry/tplink-aggressive-ntp.html">Read more …</a></p> urn:uuid:de6d9664-5f48-4c38-9258-9fcb190b3424 2017-11-20T17:50:00Z 2017-11-20T17:50:00Z

Whether TP-Link provides you with security and firmware updates for your TP-Link product or not depends on what country you’re checking for updates from.

<p>The Chinese network equipment manufacturer TP-Link has 60 country-specific websites around the world, out of which 24 are in Europe. While we’re still waiting for TP-Link to release firmware updates addressing last month’s KRACK Attack Wi-Fi vulnerabilities disclosures; I’d a look to see how up-to-date each of these 24 websites were in terms of available firmware releases. The results were discouraging to say the least.</p> <p><a href="https://www.ctrl.blog/entry/tplink-firmware-outdated-downloads.html">Read more …</a></p>