[OpenWrt-Devel] New Ubiquiti AC products locked against 3rd party firmware?

Roman Yeryomin leroi.lists at gmail.com
Mon Feb 22 08:47:50 EST 2016


https://github.com/openwrt/openwrt/commit/de350dcae493b2b71a0850b1d1d4ee0483552faa

On 22 February 2016 at 14:05, valent.turkovic at gmail.com
<valent.turkovic at gmail.com> wrote:
> Nice that you checked... I would understand this stance from a company
> that doesn't rely on so much open source software without which they
> wouldn't even exists. Shame, just shame.
>
> On 30 November 2015 at 09:48, John Crispin <blogic at openwrt.org> wrote:
>>
>>
>> On 30/11/2015 09:38, Petr Štetiar wrote:
>>> Ben West <ben at gowasabi.net> [2015-11-27 10:00:51]:
>>>
>>> Hi,
>>>
>>>> This person is reporting a new Ubiquiti AC AP where there the bootloader
>>>> does an RSA signature check on the firmware image.
>>>
>>> let's hope, that it would be possible to replace/patch that unfriendly U-Boot.
>>>
>>>> Could anyone else confirm if they've observed the same, and if it now
>>>> prevents loading OpenWRT, etc?  Or at least, confirm if the RSA signature
>>>> checking by the bootloader was not present before?
>>>
>>> We're using UBNT products and I can confirm, that there wasn't any RSA
>>> firmware signature checking previously and we're able to run OpenWRT on them.
>>> Maybe it's time to look around for alternatives...
>>>
>>> -- ynezz
>>>
>>
>>
>> Hi,
>>
>> i contacted UBNT customer support. they specifically stated that they do
>> not want users to install openwrt and prefer not to cooperate with us.
>> it is a concious decision to *not* support the free software movement
>> and be capitalist pigs. the reasoning given to me was not related to FCC
>> ruling but specifically stated that they dont like users installing free
>> software on their routers. they prefer to have submissive users that
>> will do as they are told.
>>
>>         John
>>
>>
>>>> ---------- Forwarded message ----------
>>>> From: Andrew Margarit | Cucumber WiFI <andrew at polkaspots.com>
>>>> Date: Fri, Nov 27, 2015 at 7:59 AM
>>>> Subject: Re: [FCC] New AP with the lockdown
>>>> To: fcc at lists.prplfoundation.org
>>>>
>>>> Hi there,
>>>>
>>>> Just to let you know, I've been looking at the Ubiquiti new AC APs, and it
>>>> looks like they added a RSA check in the bootloader.
>>>>
>>>> Firmware Version: BZ.qca956x.v3.4.7.3284.150911.1650
>>>> RSA Signed Firmware. Verfiying please wait...
>>>> Decrypted hash: f8 2b 45 72 9f e4 5f 46 a0 96 43 37 57 4f 49 ab 43 dc 1e 8c
>>>> Image hash    : f8 2b 45 72 9f e4 5f 46 a0 96 43 37 57 4f 49 ab 43 dc 1e 8c
>>>>
>>>> All fun and good!
>>>>
>>>> --
>>>> Andrew Margarit
>>>>
>>>> Wi-FI Chief | Cucumber Tony
>>>> Andrew at polkaspots.com
>>>> cucumberwifi.io
>>>>
>>>> twitter/cucumbertony
>>>> _______________________________________________
>>>> FCC mailing list
>>>> FCC at lists.prplfoundation.org
>>>> http://lists.prplfoundation.org/cgi-bin/mailman/listinfo/fcc
>>>>
>>>> --
>>>> Ben West
>>>> http://gowasabi.net
>>>> ben at gowasabi.net
>>>> 314-246-9434
>>>> _______________________________________________
>>>> openwrt-devel mailing list
>>>> openwrt-devel at lists.openwrt.org
>>>> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
>>> _______________________________________________
>>> openwrt-devel mailing list
>>> openwrt-devel at lists.openwrt.org
>>> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
>>>
>> _______________________________________________
>> openwrt-devel mailing list
>> openwrt-devel at lists.openwrt.org
>> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


More information about the openwrt-devel mailing list