D-Link Forums

D-Link Wireless Routers for Home and Small Business => DIR-2660 => Topic started by: Bildos on October 13, 2020, 02:28:16 AM

Title: Lack of control over encryption settings
Post by: Bildos on October 13, 2020, 02:28:16 AM

Can we have option to control encryption settings for 2660?

Currently it’s fully control by vendor / software. We can’t disable weak encryption settings etc.

It’s very important from security point of view.

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on October 15, 2020, 02:56:27 PM

D-Link is working on it.

Title: Re: Lack of control over encryption settings
Post by: Bildos on October 25, 2020, 09:54:23 AM

They are working for 2660 or new models?

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on October 26, 2020, 07:55:34 PM

I will ask for a list.

Title: Re: Lack of control over encryption settings
Post by: Bildos on October 28, 2020, 10:42:33 AM

Thanks. Please ask for estimate delivery date

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on October 29, 2020, 08:08:06 AM

The current list does not include the DIR-2660. It looks like that particular line of routers will not get the firmware fix as of now.  :o

The DIR-1750, 1950, 2150, and L1900 are the only models getting a firmware update. The 1360, 1960, 2640, 2660, 3040, and 3060 will not (as of now).

The AX routers have it already (except X1860 - firmware coming in December 2020).

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on October 29, 2020, 11:55:09 AM

I presume that included the 2680 as well not getting a change in FW?

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on October 29, 2020, 12:38:30 PM

They said the 2680 (which is EOL) is "released" but never saw a firmware come in. Says version 1.00.

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on October 29, 2020, 02:26:16 PM

Wow, already EOL...only been since 2019...sheesh. Last version was 3/2019 (1.03B01). I guess it didn't do well out in the market.  ::)

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on October 30, 2020, 06:38:55 AM

 :-X

Title: Re: Lack of control over encryption settings
Post by: Bildos on November 05, 2020, 10:20:20 PM

Any specific reason why 2660 is not included?

It’s really bad to hear that. If dev team don’t care I can’t trust in the future and it’s my last dLink device ever.

Obviously it’s security issue and vendor don’t care at all. It’s very disappointing.

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on November 09, 2020, 07:50:59 AM

I am not sure why the 2660 isn't on the list. They did add the DIR-3060 to the list (firmware coming Dec 20th) so maybe they will? They are from the same vendor so you would think they would "fix" the entire line of routers. I know our security team is pushing for fixes but could be some red tape with certain models. I definitely understand the disappointment.

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 09, 2020, 09:35:00 AM

Well for the most part, the 2660 is using AES. That's important.

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on November 09, 2020, 11:55:00 AM

They are all using AES. If you connect using a client that supports AES it will connect to it but the problem is the router is broadcasting TKIP and there is no way to turn it off. The connection from client to router or extender is using AES so that connection is as secure as it can be. WiFi will never be 100% secure. WPA3 has already been broken. 

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 09, 2020, 12:03:35 PM

Ya I get that...Well, AES is broke as well.  :-\
I hadn't heard that WPA3 was broke too. This is great news. LOL Though WPA3 already has implementation problems of it's own and compatibility with WPA2 with host and client devices...I am aware of this.  ::)

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on November 09, 2020, 12:30:58 PM

WPA3 was broke before it was implemented - bunch of articles via the google. 

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 09, 2020, 12:33:03 PM

 ::)

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on November 16, 2020, 12:28:32 PM

OK I just got BETA firmware for a bunch of routers that will fix the "weak security" issue and the 2660 was included.  ::)  Not sure why I was told no last week.

Let us know how it works out.

Download --> ftp://FTP2.DLINK.COM/PRODUCTS/DIR-2660/REVA/DIR-2660_REVA_FIRMWARE_v1.11B04_HOTFIX.zip (ftp://FTP2.DLINK.COM/PRODUCTS/DIR-2660/REVA/DIR-2660_REVA_FIRMWARE_v1.11B04_HOTFIX.zip)

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 16, 2020, 04:09:56 PM

Thank you.

I see a new drop down menu item for WPA2 Personal now.

Just fyi, before I loaded this FW up, I checked with my Switch as I did with the COVR-3902 and AES IS being reported being used by the Switch with the 2660 router:
http://forums.dlink.com/index.php?topic=75867.msg308617#msg308617 (http://forums.dlink.com/index.php?topic=75867.msg308617#msg308617)

After loading this beta up, the Switch reports AES is being used along with the iPhone using iOS 14.0.2 is not reporting "weak security".

Title: Re: Lack of control over encryption settings
Post by: Bildos on November 17, 2020, 12:22:00 AM

Any change log for new firmware ?

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 17, 2020, 07:36:42 AM

Not yet.
Just seems to add the WPA2 Personal menu option which users have asked for.

Title: Re: Lack of control over encryption settings
Post by: Bildos on November 18, 2020, 02:21:17 AM

Any expected delivery date for production?

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 18, 2020, 07:22:39 AM

D-Link doesn't give that information out. This is a hotfix only, not a beta so it's considered released I believe.

Something to try though. Let us know how it works for you.

Title: Re: Lack of control over encryption settings
Post by: GreenBay42 on November 19, 2020, 10:05:22 AM

It is a hotfix just to fix the WPA issue. BETA/Hotfix firmware will need to go through official testing and may need to pass all the global certification (FCC, etc) before considered an "official" release. Lots of hoops for an official release but in most cases the firmware file never changes from the beta/hotfix.

Hotfix = A specific feature addition/fix or security patch (very minor change)
BETA = A bunch of fixes and changes, possible feature additions or deletions (major changes)

Title: Re: Lack of control over encryption settings
Post by: Bildos on November 26, 2020, 12:26:16 PM

How to get this hotfix to execute testing?

Title: Re: Lack of control over encryption settings
Post by: FurryNutz on November 26, 2020, 12:34:44 PM

Load this FW:
http://forums.dlink.com/index.php?topic=75892.msg308619#msg308619 (http://forums.dlink.com/index.php?topic=75892.msg308619#msg308619)