This site may earn affiliate commissions from the links on this page. Terms of use.

An Asus 802.11ac router

A few months agone, the FCC issued a set of security requirements meant to ensure that routers stayed within their assigned spectrum bands and didn't crusade bug for other hardware operating nearby. The rules caused significant business organisation in the router modding and security communities, even so, considering they specifically chosen out DD-WRT equally a software packet that should be blocked from install, and required manufacturers to submit an action programme detailing how they would foreclose the utilise of unauthorized firmware. While the FCC'due south goal — preventing unauthorized spectrum usage — wasn't something many people had a trouble with, the fright was that manufacturers would take the opportunity to kill third-party firmware back up birthday, rather than trying to sandbox spectrum adjustments to encounter FCC guidelines.

FCC

The original gild (at present changed to the text beneath)

The FCC has now stripped the previous language from its documentation and no longer refers to DD-WRT equally an application that should exist blocked from running. Instead, it says: Describe, if the device permits 3rd-political party software or firmware installation, what mechanisms are provided by the manufacturer to permit integration of such functions while ensuring that the RF parameters of the device cannot be operated exterior its potency for performance in the US. In the clarification include what controls and/or agreements are in place with providers of third-party functionality to ensure the devices' underlying RF parameters are unchanged and how the manufacturer verifies the functionality.

This was followed by a blog post by Julius Knapp, master of the Office of Engineering science and Technology. In the blog mail, Knapp notes that while the overall comments supported the FCC'south goals, "one particular element generated thousands of comments from individuals concerned that the proposal would encourage manufacturers to forestall modifications or updates to the software used in devices such equally wireless local area networks (e.1000., Wi-Fi routers)."

Knapp goes on to write that the FCC's proposal is absolutely non intended to encourage manufacturers to ban third-political party router firmware or to enact restrictions. He notes that the FCC's guidance on such issues must be admittedly clear, acknowledges that previous wording had not achieved this, but that the revised document should properly convey the necessary restrictions. He also notes that the FCC has engaged with diverse stakeholders on a ane-on-one basis to confirm that the government body had no intent of banning DD-WRT or like projects.

Volition this actually solve the problem? That's less clear. Much depends on exactly how robust the FCC wants these locks to be, and what level of proof manufacturers are really required to demonstrate. Some areas of the device can be locked out with custom firmware that refuses to arrange antenna power or frequencies exterior of the legally divers spectrum, fifty-fifty if ordered to do and then in software. Information technology's too possible to use ane-style fuses in hardware to perform some of these lockouts.

On the other hand, the simplest mode to run across FCC requirements might however be to lock the router down. If the user can't install any third-party firmware, the user can't crack the router to gain access to capabilities they aren't supposed to employ.

Manufacturers might prefer a bifurcated strategy, in which cheap routers with minimal capabilities are locked down, merely users tin pay actress for unlocked routers that are capable of loading 3rd-party firmware. From the manufacturer'south standpoint, this is the best of both worlds — it prevents customers from flashing cheap routers to gain expensive features, information technology complies with the FCCs' directives, and it creates a new premium market for a previously free features. The best features, afterwards all, are the ones you can monetize without needing to develop them commencement.