onehub security features

[#1]

Hi,

I wonder if you could ask the firmware designers to add some more security functionality please?  In particular Im looking for:

1. Option to deny all wifi except whitelisted devices by mac address

2. Option to not transmit wifi SID

3. Option to deny router admin panel access via wifi (so wired ethernet only)

4. Hide Broadband username on router admin panel home page after connection login session

5. Password lock out for xx failed attempts (this might exist, not sure)

6. Login audit log

Id be grateful if you could check to see if the hub one has ftp, telnet, etc disabled.  And admin panel by https only (depricate http)

Thanks,

teal

edit, correct spelling

[#2]

Whatever you do don’t hold your breath whilst waiting for a positive response.

[#3]

 Be patient then buddy.  Ive always found plusnet support very decent.  

Moderator's note by Dick (Strat): Full quote of preceding post removed as per Forum rules.

[#4]

Moderators Note

This topic has been moved from Fibre to My Router 

[#5]

---

@teal wrote:

Ive always found plusnet support very decent.  

---

I’m not disputing that but am not aware that it extends to rewriting router firmware to meet your exacting requirements.

[#6]

---

@teal wrote:
2. Option to not transmit wifi SID

Attempting to hide the wifi SSID doesn't really add any extra security. It was not designed to be hidden, and even when "hidden", it still ends up being transmitted periodically. And then with it being "hidden", it causes other problems, devices that connect to the wifi have to keep transmitting the hidden SSID to search for the network, wherever they go.

[#7]

---

@ejs wrote:

---

@teal wrote:
2. Option to not transmit wifi SID

Attempting to hide the wifi SSID doesn't really add any extra security. It was not designed to be hidden, and even when "hidden", it still ends up being transmitted periodically. And then with it being "hidden", it causes other problems, devices that connect to the wifi have to keep transmitting the hidden SSID to search for the network, wherever they go.

---

Thats true if someone is sniffing the initial client broadcast and handshake packets. So agreed, its not security against a determined targeted attack to obtain someones ssid.  But it makes the job a little harder as you cant login without the ssid.

But other than a determined targeted attack, it reduces the attack surface significantly against opportunistic attacks.

Somewhat like not putting valuables on display.

[#8 · Accepted solution]

Well, I installed openwrt and the router is doing fine now.  Closed all the security problems I listed above. 

Perhaps the plusnet support guys if they see this might pass my op suggestions along to the firmware developers for those on stock.