I promised a follow up to the odd decision by ASUS to release a new firmware for their ZenWiFi XT8 mesh router just before Christmas. My experience has been positive so far. I have had zero issues with it. I had a brief look at my logs as since I factory reset my XT8 nodes after upgrading to this firmware. I didn’t see anything out of the ordinary. I also note that memory usage on both nodes was around 72% of the 512MB of RAM. Previous firmwares had the RAM usage about 10% higher. That implies that the mesh router is operating more efficiently.
But to make sure that I wasn’t simply missing out on anything, I’ve been following a pair of threads on Reddit along with a thread on SNBForums. And in those places, the results are more mixed. The most common issue that has been reported is that there have been issues with the nodes disconnecting. Once that happens, it may be a challenge to get them to reconnect. Or they may never reconnect at all. Meanwhile others report no issues.
Based on that, this is clearly a your mileage may vary situation. If you are on a ASUS firmware for the XT8 that is stable, you may be better off staying on that version until whatever stability issues that I am not seeing are sorted out. However, if you do decide to upgrade, you should note the version of firmware that you are currently running so that you can downgrade back to it if problems present themselves. Specifically, losing connection to one of the nodes.
ASUS really needs to get a firmware release out that stabilizes things for the vast majority of their users. And unfortunately, this specific firmware doesn’t seem to be it. Based on what I am reading in the Reddit threads that I linked to above, some people are getting fed up with being treated as “beta testers”. That in the long term will affect the probability that these users will buy another ASUS product in a negative way. Thus ASUS would be well advised to get on getting a firmware out that is stable for all.

Twitter Might Have Been Pwned In Epic Fashion
Posted in Commentary with tags Twitter on December 26, 2022 by itnerdIf you believe some reports that I have been seeing online, like this one from Bleeping Computer, it is possible that Twitter has been pwned by hackers. And the results could be devastating as the threat actors behind this have apparently secured millions of Twitter users’ personal information on the dark web. Email, username, follower count, creation date, and, in some situations, the users’ phone numbers are all included in the sample data. This came to light three days ago where the threat actor posted celebrity names and other information, as well as a note for Elon Musk in a dark web forum telling him that if he wants the data not to be made public, he needs to buy it. I’ve seen the post in question so I know it exists. And it’s going to create a huge problem for Elon. Here’s why:
In a statement on Friday, the Irish privacy regulator said, “The DPC corresponded with Twitter International Unlimited Company (‘TIC’) in relation to a notified personal data breach that TIC claims to be the source vulnerability used to generate the datasets and raised queries in relation to GDPR compliance.”
It also added that it believes “one or more provisions of the GDPR and/or the Act may have been, and/or are being, infringed in relation to Twitter Users’ personal data.”
The DPC, which serves as Twitter’s lead EU watchdog, wants to determine if the social media giant has fulfilled its obligations as a data controller regarding the processing of user data and whether it has violated any provisions of the General Data Protection Regulation (EU GDPR) or the Data Protection Act 2018.
Well, that’s going to end badly for Elon if it is determined that Twitter has actually been pwned. This organization has nailed Twitter before, and they won’t hesitate to do so again. Plus it will likely prompt other organizations like the FTC to start poking around. And the FTC isn’t shy about slapping companies silly when the drop the ball. Or in the case of Twitter, are under a consent decree because of past bad behaviour.
But the trouble doesn’t end there for Elon:
Security expert Chad Loder also revealed on Twitter and Mastodon details about an even larger data dump potentially containing millions of Twitter records with personal phone numbers that were collected using a previously fixed API bug and some publicly available information, such as verified status, account names, Twitter ID, bio, and screen name.
“I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in EU and US,” Loder said.
“I have contacted a sample of the affected accounts and they confirmed that the breached data is accurate. This breach occurred no earlier than 2021.”
BleepingComputer has verified with multiple affected users that the phone numbers in this data breach are valid.
It is worth noting that none of the phone numbers in this leaked database were present in the original data sold in August 2002, demonstrating the significant exchange of Twitter user data among threat actors and the extent of the data breach beyond what was previously known.
This is an extinction level event for both Twitter and for Elon if this is true. Even if some or all of this didn’t happen under his watch, he’s the guy in charge now so he’s responsible. I’d honestly watch this story over the coming days. Because if you were looking for a singular event that would “end” Twitter and Elon along with it, this would pretty much qualify.
2 Comments »