Home network security

Lainons, what are your thoughts on home network security? I understand that many consumer level wireless routers have massive vulnerabilities [1] and that there is an increased interest in developing exploits for these routers [2]. Any insight on the recent VPNFilter malware [3]? Or any tips on home network security or recommendations for more secure wireless routers? 1. https://arstechnica.com/information-technology/2014/02/dear-asus-router-user-youve-been-pwned-thanks-to-easily-exploited-flaw/ 2. https://threatpost.com/popular-d-link-router-riddled-with-vulnerabilities/127907/ 3. https://boingboing.net/2018/05/23/uh-oh-2.html

>many consumer level wireless routers have massive vulnerabilities This, and the software running on them is often proprietary. For my own network setup, I connect an old laptop (running Linux) directly to the internet and run hostapd for the wireless connection. This is of course a limited setup since there isn't any wired capability, but I only need a server (the server is running on the internet-connected laptop), another laptop (connected to the wireless) and a phone (also connected to wireless). If I wanted a more advanced solution I would get an old desktop computer and install a PCI ethernet card (one of those 4 port ones). I would then add a USB wireless stick and use the same wireless configuration. >[1] >/g/ I never heard of /g/ doing anything like this -- I thought they were too retarded, after all many /g/ users think that wangblows 7 is "good". Was it just one person, or a coordinated effort?

If you leave your house/apartment/dwelling for any amount of time unplug your router.

>>4751 Probably a guy who were smart enough to credit someone else about this malware but too retarded to credit /g/ when he could actually pick a competent community.

Thoughts on bringing portable, open source router with laptop when in town?

>>4767 What for? Your laptop is a portable open source router.

My home network security is admittedly not great at the moment because I live with roommates who need to be able to connect their various spyware gadgets to the wifi. I'm running a linux NAT/router/firewall with iptables so at least that's reasonably secure... at least compared to a cheapo off-the-shelf wifi router. My compromise at the moment is to just assume that my home LAN is potentially hostile. This mostly consists of firewalling all of my machines and only connecting them over my VPN or with ssh tunnels. Once I move out I'll be able to do proper network security but this seems good enough for now.

What SIEM do you guys use for your home network? If you don't have a SIEM, how do you aggregate and analyze your traffic?

>>4828 grep and tcpdump, we're not trying to LARP as Enterprise Grade DevOps Agile Engineers.

>>4829 I am. Plus I'd need to build a script for that and Lord knows I'll forget something important like internal address spoofing

>>4829 >Blackhat 2020 >New SIEM technology rips through the crowd >checkbooks and questions fly madly towards the mysterious vendor >Panic plagues McAfee and Splunk as they ask, what kind of bleeding edge technology has deprecated them >Deepest packet inspection >Un-artificial intelligence >Their secret sauce? grep and tcpdump

>>4833 i fukkin luld

>>4751 Secret, but easily reversed. The publish the firmware updates, often unencrypted. >>4767 Make a pfsense box and do your routing from that. There are vendors who sell them pre-flashed with pfsense. It's not hard to provision an open source router. You don't need special hardware either, you can do it all from an extra laptop if you really want to. As for event monitoring, you can do it with snort if you want to.

>>4833 you deserve an oscar