Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #231511

Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with reserved IPs on wlan0?

Show all headers | View raw

Celejar wrote: 
> On Mon, 8 Feb 2021 06:41:23 -0500
> Dan Ritter <dsr@randomstring.org> wrote:
> 
> > Gregory Seidman wrote: 
> > > If you want a Linux router/AP, I recommend OpenWRT over Debian. It runs on
> 
> ...
> 
> > Debian gets security updates in a timely manner (for stable).
> > 
> > How's OpenWRT's security team?
> 
> I'm not sure if this is a genuine question or a rhetorical one (sorry -
> tone doesn't always come across well in email), but OpenWRT does have a
> security process, with advisories, bug fixes, etc.:

Semi-rhetorical: my experience with OpenWRT and ddWRT is that
once a device is installed, it never gets an upgrade. I'd be
happy to learn otherwise.

> https://openwrt.org/docs/guide-developer/security
> 
> I suspect the process may not be as good as Debian's, but they do fix
> at least some serious bugs fairly quickly. E.g., if I'm reading the
> following pages correctly, the Debian DSAs for the recent serious set of
> dnsmasq vulnerabilities went out on Feb. 4, whereas OpenWRT issued its
> Security Advisory on Jan. 19:

That page lists 15 advisories over the last 3 years -- let's say
2 years, since this year is just beginning. Four of those
advisories are for OpenWRT-only problems.

In the 2 months of 2021, so far, Debian's security team has issued 28 notices.
Let's discount the desktop software -- that's 8 of them, by my
count -- because nobody runs desktop software on a router.

OpenWRT's security process doesn't look as terrible as it used
to be, but it doesn't really look good right now, just trying to
be better.

This probably doesn't matter much if you just want a WAP inside
your house, but I feel confirmed that Debian is still a much
better choice for an Internet-facing router/firewall.

-dsr-

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-06 11:30 +0100
  Re: Linux router AP with reserved IPs on wlan0? <tomas@tuxteam.de> - 2021-02-06 11:50 +0100
  Re: Linux router AP with reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-06 13:10 +0100
  Re: Linux router AP with reserved IPs on wlan0? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-02-06 16:20 +0100
    Re: Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-06 20:10 +0100
      Re: Linux router AP with reserved IPs on wlan0? Tixy <tixy@yxit.co.uk> - 2021-02-07 10:10 +0100
        Re: Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-07 10:40 +0100
  Re: Linux router AP with reserved IPs on wlan0? Gregory Seidman <gsslist+debian@anthropohedron.net> - 2021-02-08 03:30 +0100
    Re: Linux router AP with reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 12:50 +0100
      Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 14:10 +0100
        Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 14:40 +0100
          Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 15:40 +0100
            Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 16:00 +0100
              Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 16:30 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 17:10 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 21:40 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 22:50 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-09 00:30 +0100
                RE: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP  withreserved IPs on wlan0? Michael Grant <mgrant@grant.org> - 2021-02-09 13:00 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with reserved IPs on wlan0? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-02-08 17:30 +0100

csiph-web