🧙 Check out my other goodies @ https://lowlevel.tv

We're at the point where I'm more shocked when something ISN'T backdoored

company: "it's just a bug"
the bug: * printing the unencrypted password *

WPM: 200, accuracy: 6%

So, not so much an "Amazon router" as a router you bought on Amazon. That distinction is crucial.

Nearly 15 years ago tenda literally had their router key generator exposed per model and i made an app on android that would take the router name and give you the generic password 😂
Times havent changed.

That isn't an Amazon router, it's a router you found on Amazon. The distinction is important because Amazon owns a router company, eero. You should hack into an actual Amazon router and divulge what you find.

The fact that anyone can be sued for pulling keys like this feels stupid

Many years ago we (local ISP) had a traffic shaping device. It was quite expensive, with extra fees for licenses to do more. We had to type license keys they provided over ssh. We replaced it by another device we managed ourselves (on the same public IP), and there suddenly were login attempts for a weird username, followed by a phone call from their support that our device was defective, and we should send it back to them. Apparently they would log in to keep taps on what was happening to it, including if keys were valid or if there was chassis intrusion. Fun times :)

This should be shown to anybody who wants to know how real hacking is done and not that bullsht in tv. I know what a great feeling is when you find a way in a maze full of dead ends. Great stuff ;)

If poor security was deemed illegal, much of the planet would be in jail.  Not just devs but end users too.

$26 dollar router to protect your home network 😂

The issue is that most people do not care.
They want a cheap router that delivers the net for all home devices, and that is it.
Using a router based on OpenWRT or FreeBSD is rather for technically inclined people, not for the average net consumer.

When you look for a router or switch, if it doesn't have OpenWRT support, move on and look for one that does !

"I don't want to get sued" is pretty good measure for how bad it is

With the US government trying to ban all foreign made routers in 2027 you could argue all US made routers will have an AT&T style backdoor for surveillance after that point. I never see anyone recommend the best router in the thousands of “I hacked this” videos if someone was shopping before then.

Kept hearing "tender router" instead of "Tenda router" and had this mental image of a small, fragile, vulnerable, soft and cuddely device.

I've always known Tenda were total crap... I just didn't have the evidence, until now...

Modern corporations only care about exploiting people. We need  to stop thinking corporations care about consumers. Actions speak louder than words.

I did some router shopping a few months ago after I discovered my own router hasn't been updated since half a year after I bought it (kinda just assumed they wouldn't be sold if they were EoL... Apparently they very much are).
Since finding out their support time was pretty much impossible on my own, I asked the stores if they had that info. The response I got from most stores was "any particular reason you want updates?".