D-Link refuses to patch yet another security flaw, suggests users just buy new routers — D-Link told users to replace NAS last week
D-Link has another security flaw with older equipment that won't be repaired — D-Link told users to replace outdated NAS last week
The DSR-150 is still being sold on Amazon under the D-Link store. Why the hell would you end of life something you still sell.
Don't want to get lumbered with a bunch of old stock now, do you?
Just say you are from the Middle East.
Product Status (Revision Series_v1500): Live - The product is actively being manufactured and sold."
Okay so the 2015 EOL ones, yeah I can understand telling the customer to update their shit. They shouldn't have to support nearly 10 year out of date stuff.
May 2024 EOL ones? Bruh. C'mon now.
I would love to know when they stopped selling it compared to the EOL. EOL should be at least 5 years past the last time the models were shipped out, maybe more. So if May 2024 was EOL I sure hope they weren't selling them after 2018.
Hopefully there’s a mistake in the article.
There right you and i should just buy a new one
Of a diffrent brand
Yup, my Mikrotik router is doing great years after I bought it, and I expect to keep getting updates into the future. I used to use a LinkSys router w/ DD-WRT and later OpenWRT, and I think those are still supported to this day.
Yeah openwrt and ddrwrt are just perfection. I recently switched out my isp eero router for a gl.inet flint 2. Adgaurdhome and setting up services have been a dream! And i could actaully see what my devices where sending packets.
MY SAMSUNG TV WAS PINGING TIKTOK WTF. blocked everything on my smart tv minus netflix and amazon. Because samsung tv uses AWS for channels
Had me in the first half
Be nice if companies had to open source firmware they are going to EoL.
Not going to hold my breath that anything like this will happen in the current political climate, but yeah, that should be mandatory. Even ignoring the exploitive nature towards their customers, it creates a ton of unnecessary waste.
Exactly. As a consumer, when I buy a product, I'm not just buying the state of things at the time, I'm buying with an expectation of ongoing support. If they choose to not support it themselves, I should be able to support it myself.
In the old days, hardware came with schematics, so when the manufacturer warranty ended, customers could repair things themselves. That should extend to software as well, since software is just as much a part of the functioning of a device as capacitors and whatnot.
Welp never buying anything D-Link ever again
Because they won't support routers that were EOL a decade ago?
Companies should be forced to release all source code for products that are "EOL". I will never change my mind on this.
May 1st 2024 was a decade ago? (The article has a list and only two are old as you mention, though not quite a decade yet)
Because that bug was so egregious, it demonstrates a rare level of incompetence.
Most reached EOL in may of this year.
I had a couple of dlink gigabit desktop switches. Two failed so far, one has taken down the whole network, not just devices directly connected to it, and the other one fried 2 router ports when it died. I learned my lessons about buying crappy network hardware.
Edit: that happened within a few months, so these switches also have a very clear EOL.
Long ago, D-Link was good but then they sold the company. Just like Alienware, Farbreware, Oaklies, etc.
Oakley, like the sunglasses company? What happened to them?
Luxottica. I've visited their HQ in soCal, people aren't having fun and coming up with wacky designs anymore.
RubberElectrons beat me to it, but EyeMed Vision Care, LensCrafters, Pearle Vision, Sears Optical, Sunglass Hut, and Target Optical are all the same company, Luxottica.
Glasses from Armani, Brooks Brothers, Burberry, Chanel, Coach, DKNY, Dolce & Gabbana, Michael Kors, Oakley, Oliver Peoples, Persol, Polo Ralph Lauren, Ray-Ban, Tiffany, Valentino, Vogue, and Versace, are all from the same company, Luxottica.
Our shit sucks. Buy more lol
there should be list of companies that should be avoided and why, its impossible to keep track of everything like this
An idea for an app I came up with for a class once was one that let you scan a barcode of a product in like Walmart and get what parent company owns it, like how Nestle doesn't like to put their name on companies they bought (or not in big text anyways).
So if you want to avoid Coca Cola you could scan it and see who it's owned by and if that company matches one of the ones you have blacklisted
Fun fact, 'peace tea' is owned by coca cola
There's an app called 'buycott' that does exactly that!
Unfortunately, that list would be almost complete. It would be much easier (and realistic) to maintain its complement.
I mean this is pretty standard in all industries regardless of whether it's a software flaw or a physical flaw in any other kind of product. What's the likelihood of a vacuum manufacturer replacing a part in a 15 year old product that had a 1 year warrantee even if it's a safety issue? Sure the delivery and installation is cheaper with software, but the engineering and development isn't, especially if the environment for building it has to be recreated.
I work for a manufacturer with part catalogues going back to 1921, and while the telegraph codes no longer work, you could absolutely still order up a given part, or request from us the engineering diagram for it to aid in fabricating a replacement. You can also request service manuals, wiring diagrams, etc. Don't all half-decent manufacturers do this?
Yes they do, but half decent manufacturers are extremely rare.
Now I wish you'd tell us what the company is so if I ever need anything in that industry, I'd know where to buy from.
Been there done that. Got the tee shirt.
While good support to customers is very valuable, trying to support a product that is decades old and shares nothing in common with current products is a plain waste of time energy and money.
It would require someone to search out all the documentation needed to make that one part, then you need to figure out the correct process to make said part, determine if you have material on hand or need to special order something, then try to find that one old jig/fixture needed amongst a building full of 100's of such items for the right one. Then you need to be sure that the the complete fixture is there and nothing is worn out beyond use. Then you need to make time to insert this one-off semi-custom part into the manufacturing process.
By the time you do all this, that one 20 year old obsolete part will have perhaps cost you thousands of dollars and you still haven't made the first piece of swarf. Imagine the shock and surprise that customer would have when they get the bill that accurately reflects the true cost.
That's assuming you're looking for a replacement part. This is redesigning the product to work differently to fix a flaw. Like if you made a vacuum company use a different gear because the existing one was too fragile. That's likely not something you can just swap out. First you need an engineer to decide what kind of gear and redesign everything around it to make the gear fit properly as well as creating a way for it to be easily installed by the end user or their repair service. You're ultimately changing the functionality of the original product. Yes it's flawed functionality, but there are tons of flawed products out there.
What you're saying is perfectly reasonable, but also doesn't apply here because they're still selling this router new on the D-link Amazon store.
If you're going to stop supporting a product, you should also stop selling it.
As far as I can tell, those aren't from authorized resellers or even from Amazon itself which they might have some ability to stop selling them. These are just people who are using amazon marketplace to sell off old stock like any other product. D-link hasn't sold them for a while. But I could be wrong, I just haven't seen any evidence that they are selling them. If Bissel had a vacuum that had a faulty gear that would break after a few years of use and they stopped making them, that wouldn't stop someone from buying them up from Walmart or other store warehouses that no longer sold them and listing them for sale on Amazon or Walmart or whatever marketplace. That's very common.
This is why a number of countries have laws saying spare parts must be made available for a number of years past being sold. Well beyond what the warranty is.
How is this significantly different?
I'd also settle for releasing 3D models of out-of-production parts so they can be 3D-printed by enthusiasts.
Story time: in my second-gen Mazda Miata, I closed the centre console lid on a piece of cardstock by accident and it snapped the plastic piece that latches the lid shut. The part previously sold for ~$10 but they stopped producing it as a standalone part at some point and the only way to acquire it was to buy the $100 centre console lid assembly.
This isn't spare parts. This is asking for a new part to be designed and manufactured to replace an existing part. That takes time and money. Granted software doesn't require mass production, but creating the initial version does take expertise and resources that may no longer exist in addition to the time and money.
Someone can generally make 3rd party fixes for hardware flaws of discontinued products without the same kinds of threats software gets. Like replacement antennas or vaccuum bags.
Compiled software can't be legally decompiled for use in distributing software fixes.
That's not necessarily true. That's a copyright issue. Now if d-link was to say that the product was not abandoned and thus the copyright is still theirs, then you might have a case that they need to fix the issue. That doesn't mean they need to give you the code, but decompiling should be OK. But copyright laws vary quite a bit. So that's a totally separate issue.
But you are welcome to write your own firmware and install it on the device in most localities. You just need write it from scratch, just like replacing a custom gear or motor in a vacuum would require engineering it to fit inside the case and connect with all the appropriate parts. Which you are welcome to do.
but does it run openwrt?
e: no it doesn't, only one model had half-baked image made and available for download from some sketchy forum post made in 2014
I moved to an OPNsense router a couple of years ago and I’ve never looked back. Hell is shitty consumer routers.
This is the way.
Do you have any recommendations on OPNSense routers?
Oh man, it’s a nightmare and I just happened to be lucky. I ended up buying one of those passively cooled router-esque N100 boxes out of China (AliExpress) and while it was a total punt it turned out to be a great experience, and their customer service was actually good too.
Kingdel was the make/vendor and it’s been rock solid.
No mercy from Low Level.
I watched and enjoyed that one yesterday, and he's bang on the money. People here are saying "well it's EoL" but that means it's got all the way through development and its full lifetime with such a prominent set of bugs.
I don't think I'll be buying D-Link if that's what supported means.
Why do they say they’re prohibited to provide support? That a bad translation?
Commodity hardware & open source software for the win.
When my Western Digital NAS was never going to get critical security patches, I was so freaking glad to find out that they just used software raid... I threw the HDDs in a Debian server and never looked back.
It's certainly nice to have things that are turn-key, but if you can find your way around any OS, just avoid proprietary everything.
A bunch of juvenile D-Linkuents. Get it? D-Link? Nevermind....
a new non dlink router. Since the should be named f-link for a number of reasons.
Same website (granted, different author, but), same inflammatory language, same vendor, referencing previous erroneous article...I'm not even gonna read this one. Just going to copy/paste my previous response from the previous post:
At a certain point it's the consumer's (and blog writer's) fault, and that's after EoL. Not patching a supported one and just getting rid of support, saying buy a newer one? Yeah, that's bad.
Continuing to not support an EoL model that you already don't support due to EoL (or even dropping support for an EoL model that no one expected you to support in the first place due to EoL)? Non-issue.
Is DDWRT still a thing?
OpenWRT is. Not sure if it's supported on that hardware tho.
Perfect time for users to buy something that isn't D-Link then innit.
It baffles my mind how people have picked up a cheap knockoff manufacturer and forcibly made it into a major brand... That still produces junk at same 5 dollar knockoff quality level it had from the start.
The article also mentions Cisco briefly, who also suck. Almost as much as Palo Alto
then what? the brand thats owned by a chinese company, and even designs not just the software but the hardware too according to Chinese interests, tp-link?
or the one that requires online registration to access the setup page (and so to replace the firmware) that is netgear?
Instead of trusting DLink with an off the shelf NAS, it might be easier to build your own with a Raspberry Pi running openmediavault hooked up to a couple of USB hard drives. It's worked well for me for over 6 years now with no issue and could cost way less.
“Easier“, no. Not for the average person on the street.
Don't get me wrong, I've built several NAS over the years (dropped OMV for just Arch and the packages I want) and loaded OpenWRT (etc) on routers
But, building my own NAS, servicing my own car, repairing my own house, felling my own trees, at some point I'll just lack knowledge and buy something simple / pay someone to do it... and that's where cheap consumer electronics fits (unfortunately)
Except a lot of it doesn't fit because tons of it is predatory trash sold as functional when one or two things can go wrong and ruin everything.
It's hard to expect the layman to need something technical, not know enough technically to do it themselves, but have enough surface knowledge to not get ripped off. It's like threading a needle of the perfect level of wisdom.
Like I'd wager the common every dude would look for a connected hard drive, maybe Western Digital because of the market saturation, but there's just so much garbage online that half works.
Then there's interconnectivity issues, software not being available cross-platform after already spending hundreds on hardware, Apple problems.
The average user is just set and ready to be ripped off at like, all angles.
I built my own with an old PC, and it's pretty easy. You can install TruNAS or OMV if you want, but I ended up just installing my distro of choice (OpenSUSE Leap in this case), set up BTRFS on my NAS drives in something similar to RAID 1, and set up a few services (Samba, Jellyfin, etc). TruNAS or OMV will make that initial setup a lot easier, so do that if you're not confident.
The Raspberry Pi is not nearly fast enough for what I want it for, and I had an old PC laying around, so I figured I might as well reuse what I have. I started w/ a Phenom II x4 from 15 years ago, and recently upgraded to my Ryzen 1700. I plan to upgrade my NAS hardware whenever I upgrade my gaming PC to keep things recent-ish. Total power draw is somewhere around 50W, so a fair bit more than a Raspberry Pi, but only like 2x more due to the drive overhead (I use NAS-grade HDDs).
I think it's easy to blame a company for how they are handling this, but at the same time, if you're using a router that old you should probably already assume that it has vulnerabilities that haven't and probably won't be patched.
I hate to say it, but depending on manufacturers for this kind of stuff will always inevitably lead to these kinds of situations. This is why I always buy OpenWrt compatible routers and DIY my own NAS.
Over the years, I've experienced:
After that I basically said, fuck it, I'll DIY my own and have been much happier ever since. If you have the know-how and the time, DIY is the way to go for longevity.
I agree. Buy a new router that isn't Dlink.
Yeah after gettin screwed by the DLink you might as well use the TP-Link