ICYMI, Joe Menn had a good scoop this week about how the US govt is getting set to ban TP-Link devices from being sold in the United States. If that happens, a whole lot of small businesses will probably need to find new networking gear. I have never trusted TP-Link devices and have repeatedly warned readers away from them. They have a history of flooding the market with massively underpriced hardware, and this is a market where generally speaking the cheapest means the most hackable. Here's one reply I sent to a reader in 2023 who inquired about finding what appeared to be an undocumented cloud login page.

https://www.msn.com/en-us/news/politics/u-s-agencies-back-banning-top-selling-home-routers-on-security-grounds/ar-AA1Pubbt

"Thanks for your readership and the nice note. I was posting on Mastodon yesterday about your very brand of router!

https://infosec.exchange/@briankrebs/110588154233185809

"I realize that NYT and others constantly recommend TPLink b/c of the features vs price point, but I would stay away from this brand, and any that force you to register "in the cloud" before you can use them as local networking devices. You do not want your router to do anything except when you tell it do so, and to my mind all this cloud business being attached to network storage and local network things is troubling."

"If you are at all confident around computers, I'd recommend getting something like a high-end ASUS router and then installing an open source firmware on it, like Tomato or something. Because the default software that is on most routers is complete garbage, and often turns on a lot of stuff you really don't want turned on, or has other stupid default settings. If updating your new $160 router w/ third party firmware that could brick it if you screw it up is too much, then just stick with a Netgear router and make sure you check for firmware updates periodically."