5 mo. ago • 99%

New ASUS router firmware now requires a user to be 16y or older and will restrict features and even security upgrades if you opt out

ASUS rolled out an update to its firmware (3.0.0.6.102_34791) that now requires users to be over the age of 16 and to send a slew of metrics and data back to ASUS. If you do not agree or do not check the box to verify you are 16y or older, you cannot use the router. At this time, I’m not sure if ASUS has meant to disable the router for anyone under 16 or if it’s a bug.

You can opt out at any time but lose access to a slew of features:

Please note that users are required to agree to share their information before using DDNS, Remote Connection (ASUS Router APP, Lyra APP. AiCloud, AiDisk), AiProtection, Traffic analyzer, Apps analyzer, Adaptive QoS, Game Boost and Web history. At any time, users can search the contents of the terms at this page or stop sharing their information with other parties by choosing Withdraw.

Moreover, ASUS disables automatic firmware updates and worse, all security upgrades unless you opt into the data sharing. Security upgrades perform the following:

Security upgrade incorporates security measures that continuously update its security file and scans to protect against malware, malicious scripts, and emerging threats in order to secure the router and ensure system stability. Some upgrades addressing important security issues or meeting legal/regulatory requirements will still be downloaded and installed automatically, even if "Security Upgrade" is turned off.

Edit: I have personally contacted their CEO's office, but if others would like to voice their disapproval as well, here is a link: https://www.asus.com/us/support/article/787/

161

161 comments

Is Asus just asking to have a shitload of lawsuits?

128
The title could use the word "router" somewhere.

64
Give it a minute: Tech Jesus and his Nexus friends are having a great time with ASUS recently. I'm sincerely looking forward to how far they take things.

56
The last thing I want is my router sharing information with other parties.

44
Asus went the bad way. Check out louis rossman vídeos about asus, héroes one of them. https://www.youtube.com/watch?v=NHQqKi9NcTs It is a company to be avoided. It went the non ethical way.

35
Nasty. Thanks for the heads up.

35
Asus would do good in hiring a real lawyer. Parents accept, kid uses router, data collected of child, illegal. So easy to rip them a new one.

35
Because they aren't legally allowed to spy on minors they add this shit to bypass it?

32
If you own a router from ASUS and find OpenWRT too difficult:

install Asuswrt-Merlin

32
OpenWRT is better for a lot of reasons. It isn't as user friendly but if you know a little networking you will be fine. The big thing is that automatic updates aren't a thing so make sure you manually update.

28
This is sickening.

People should use alternative routers and software such as OpenWRT, DDWRT, and Gl.iNet routers

19
If I bought one of their routers and this came up, I would simply be returning it and giving the person at the counter a printout as to why. Sorry, but this router is not "suitable for purpose". Look up that phrase and "merchantability".

19
never use stock router firmware

17
If anyone is looking for an alternative firmware, check out Fresh Tomato: https://freshtomato.org/

16
Okay ASUS is out. Recommendations?

16
FYI the open source OpenWRT based Banana Pi R3 AX 4x4 is a thing. Don't buy closed source Routers/APs on purpose.

15
I remember seeing that Openwrt is working on getting their own hardware sometime in the future. Might be worth looking at when the time comes. I'll stick with merlin until that goes the same way.

15
Next DEFCON is in two months, can't wait to see them get absolutely pwned.

14
openwrt is pretty nice

11
Permanently Deleted

11
Top level comment to remind the Open WRT fanboys that this ASUS router uses a Broadcom chipset, which is not supported on OpenWRT. Been seeing it recommended by a lot of replies to comments when it won't be helpful in this case, since Broadcom chips don't have open drivers

9
I'm seeing a few comments suggesting OpenWRT, which is what I use and love: the correct response to this level of capitalist tomfoolery should absolutely be to 1. buy hardware that supports FOSS out of the box, or 2. install FOSS firmware.

BUT: OpenWRT isn't for everyone. Installation on supported devices is usually pretty easy, but it does require being invested in setup, maintenance, and understanding of the software. There is little built-in handholding, and most setup beyond basic functions requires reading the docs and wiki; sometimes, some functionality requires running commands directly on the device rather than the LuCI web-interface.

This kind of understanding and investment should be the end-goal of all privacy-oriented tech users. Technology is complicated, and each layer of handholding that devs add also necessarily obfuscates behind-the-scenes functionality, which runs counter to privacy and security. That being said, the barrier for entry to privacy-respecting tech shouldn't be "a masters in CompSci," and thus any alternative to major tech brands is still a step up from just accepting what they give you. Just be aware that your current firmware may be a stepping stone towards software freedom, instead of a stopping point.

9
Good thing openWRT works on those

8
THE YEAR OF OPENWRT!

/s not /s

8
This is why I never used to recommend Merlin WRT.

The ones you should look into are OpenWRT (my favourite), DD-WRT, tools like OPNSense or the more sophisticated Ubiquiti.

8
The data sharing persists even with merlin. I get a prompt about it as soon as I tried to enable those advanced features. I still get updates though.

7
Should I need a new motherboard, which vendor would you guys recommend that's not crap (as a company)? Gigabyte? GamersNexus had a few very negative reports on MSI as well.

7
All you need is Protectli with OPNsense and cheap TP-Link in AP mode.

5
Fantastic. Time to deliver opnsense and/or pfsense to the masses. Or better, recycle a router with openwrt or similar

5
I guess I'm not updating my routers anymore then. Sucks though. It seemed to be the only Asus product that wasn't garbage.

4
Because nobody has ever lied on one of these lol. Still criminally stupid of ASUS though.

1
I mean if you're using their servers for all of that cloud management can you really expect them not to take a look? You can buy a router and install open source firmware that doesn't scrub your data or keep giving money to giant corporations that put profits over customers.

0

You've viewed 161 comments.