If it can't be flashed with openwrt, don't buy it.
post
Here we go again: https://openwrt.org/supported_devices
Imagine you’re buying a safe. After your purchase, you realise your safe key does not work. You contact the manufacturer and they say ”oh we need to copy and authenticate your safe key in order for you to use it. We also need your address. Don’t worry, we keep the copies absolutely safe in our posession”
This is how dumb this argument sounds
And then they keep the copied key in a safe everyone on the world has access to and can try to penetrate it with some big ass hammer, and they just pray, that it's actually secure.
You don't need to imagine this. That's exactly how many consumer safes work.
I bought a safe from Costco (USA) that had a Securam lock on it. I had a police officer friend causally mention that if they needed access, they'd call the safe company and get the backdoor code. I was a little shocked by this, so I emailed Securam. They said that actual use of such codes is at the discretion of the manufacturer that uses their locks, and they referred me to the safe manufacturer.
I emailed the manufacturer, and the customer support agent confirmed what my cop friend said. So I asked what security protocols the manufacturer had in place to authenticate callers and verify they were actual police, and also how they validated the warrant or court order used to get the info. The CS person didn't understand the idea that someone might be pretending to be an officer, nor that even a real officer might be making an unlawful request. She said that if an officer calls and asks, they give them the code. I asked the agent to send me a copy of their policy on this. A day later I got an angry response from the CS lead saying denying what the CS agent said, claiming that they don't have backdoor codes, and don't give them out to officers.
Honestly, that’s still way more secure than OP’s image. Physical access is still required in your scenario.
I needed a to make a copy of my front-door key, so I tried one of the automated key-copiers. After copying my key, it said that it needed my address to ship the new key to.
I was livid. I just gave you a copy of my key, and now you want my address? It was basically Break-Into-Your-Home-as-a-Service
"Our cloud data is absolutely secure" thanks for letting me know I should never get this product under any circumstances holy shit. They are an attacker in my network if that happens.
My ISP gave me an Eero device when we upgraded our internet. I got rid of that shit ASAP. There’s no reason for a cloud provider to have visibility into my LAN and the thought of that makes me feel ill.
Looks like it might be supported by OpenWrt soon: https://openwrt.org/toh/tp-link/tp-link_festa_f52-outdoor_v1
Status: Device support is proposed in OpenWrt PR #24903 and depends on firmware-utils PR #74. Neither PR has been merged at the time this draft was checked. No official OpenWrt image is linked here. Do not flash an EAP225-Outdoor image to the F52-Outdoor merely because their hardware is similar.

all 19 comments