You Don't Own What You Buy, Part 15,332: Cisco Forces Questionable New Firmware On Routers
from the not-cool dept
One of the things that we keep learning in a connected, digital age, is that what you think you "bought" you often don't really own. Companies who sell you products seem to feel a certain freedom to unilaterally change the terms of your purchase, after the fact. I'm reminded of Sony removing key features on the PS3, though there are plenty of other examples. A new one is the story of Cisco, pushing out a firmware update to routers without customer approval and (even worse) having that firmware update block people from logging in directly to their own routers. Apparently, if you don't like it... er... too bad.Cisco has started automatically pushing the company's new "Cloud Connect" firmware update to consumer routers -- without customer approval. Annoyed users note that the update won't let consumers directly log into their routers anymore -- they have to register for a new Cloud Connect account. The only way to revert to directly accessing the device you paid for? You have to unplug it from the Internet.Oh, and registering for such an account means you have to agree to give up your data so that Cisco can sell it. As per the terms:
...we may keep track of certain information related to your use of the Service, including but not limited to the status and health of your network and networked products; which apps relating to the Service you are using; which features you are using within the Service infrastructure; network traffic (e.g., megabytes per hour); Internet history; how frequently you encounter errors on the Service system and other related information ("Other Information"). We use this Other Information to help us quickly and efficiently respond to inquiries and requests, and to enhance or administer our overall Service for our customers.Seems like a good way to drive people into buying routers from other companies. I can see how a "cloud service" could have value, but it should be presented to users as a choice, where the actual benefit to them (if there is one) is clearly presented. Instead, this rollout seems designed solely to benefit Cisco and its partners, rather than the people who bought (or so they thought) their routers.
We may also use this Other Information for traffic analysis (for example, determining when the most customers are using the Service) and to determine which features within the Service are most or least effective or useful to you. In addition, we may periodically transmit system information to our servers in order to optimize your overall experience with the Service. We may share aggregated and anonymous user experience information with service providers, contractors or other third parties...
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
Cisco, please go away with your imaginary intelligence.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
The Great Cisco Firewall of China
Thanks to Cisco, no one will ever hear them say it.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
Here's an article about the router family:
http://news.cnet.com/8301-17938_105-57409483-1/cisco-launches-app-enabled-router/
"The new Linksys EA4500, EA3500, and EA2700 routers are available now and cost $199, $139, and $99, respectively. Cisco promises that a full range of its cloud-enabled services will be available by June."
It sounds like they kept their promise.
And here's an Amazon product page:
http://www.amazon.com/Linksys-EA2700-App-Enabled-Dual-Band-Wireless-N/dp/B007IL72CI/
"Cisc o Connect Cloud (Coming Summer 2012) - Over time, continue to get new apps and capabilities that will enrich your connected lifestyle"
[ link to this | view in chronology ]
Re: Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re: Re: Re:
(I don't tend to trust cloud services.)
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re: Re:
[ link to this | view in chronology ]
[ link to this | view in chronology ]
On the off-topic, I wonder if this is jostling Taplin's scruffy beard.
[ link to this | view in chronology ]
Re:
http://blogs.cisco.com/home/answering-our-customers-questions-about-cisco-connect-cloud/
If the tone isn't "screw you all" enough in their response to the PR fallout the "commenting is locked" part of the post should tell you enough right there.
[ link to this | view in chronology ]
So.:... Was: Re: Re:
[ link to this | view in chronology ]
Re: Re:
Really?
"We may share aggregated and anonymous user experience information with service providers, contractors or other third parties..."
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Hey at least if I forget my password I can find it on the Internet.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
Haha too true. So to check my public side connection I'll have to go to my neighbors', use their Internet connection to find my password, and sneaker-net it back to my house. All while keeping my cable co. support representative on hold.
And the circle of justice is complete.
[ link to this | view in chronology ]
Eh.
[ link to this | view in chronology ]
Re: Eh.
http://home.cisco.com/en-us/cloud
But if I had an older Cisco/Linksys with their original firmware, I would go to Tomato immediately before they figure out how to hose past successes with present stupidity.
[ link to this | view in chronology ]
Re: Eh.
[ link to this | view in chronology ]
Re: Re: Eh.
http://www.buffalotech.com/about-buffalo/news-and-press/press-releases/buffalo-and-dd-wrt-c ollaborate-to-create-the-most-comprehensive-consumer-and-small-business-wireless-offering
[ link to this | view in chronology ]
Re: Re: Re: Eh.
[ link to this | view in chronology ]
Re: Eh.
personally?
wrt54gs running ddwrt for about 5 years now. have never needed to replace it and its rock solid.
[ link to this | view in chronology ]
Re: Re: Eh.
I was thinking about upgrading to N, but after this, and I am sure the others will follow, ill just keep em. Thanks for keeping money in my pocket Cisco. Now to go try and grab a couple off of ebay.
[ link to this | view in chronology ]
Re: Eh.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
Really? You can only use your net connection with a Cisco router? While I of course think this is a shit move on their part, the customer does have all the freedom in the world to take them to Small Claims court and to switch to a different router. This would be a different matter entirely if this were the ISP doing this.
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
ISP's will and do provide wireless router or router/dataset combinations that they've rebranded mostly ATT and 2Wire. They get to share the "sale" with ATT and 2Wire when they do that. I have no idea if 2Wire is as bad as it was when it first appeared but until I found out I will never, ever, have one.
Sad, you know. Cisco gear, till this, used to be a bit old fashioned and crotchety but it ran forever. Oh, the price of progress.
[ link to this | view in chronology ]
Re: Re: Re: Re:
Although recently, we had a random out of nowhere thunderstorm (WITH HUGE HAIL, which is rare for South Texas) and I lost service for a day. When it came back, somewhat, I couldn't connect and when I called they tried to blame me (an IT guy) for not setting it up right or doing something I shouldn't be doing and a ton of other excuses/stuff they said was my fault. I told them that since my neighborhood first got DSL service they had always been at fault for our problems. Laying the lines and then just tossing almost no dirt on them, which led to them being cut by someone's lawnmower. Burying the line in the ditch that until two years ago had no out (so when it flooded, it would fill and take out the neighborhood's service until it was drained by the city and had time to dry) and so on. I then hung up on them and reconnected my router and it worked, with a catch. Now I had to set it up from scratch (not the router but my service) and AT&T installed a ton of crapware on my laptop just to get my connection going again (all settings preserved from before). I just uninstalled it all and have been good to go since.
Out of all the routers I've setup in my life, 2Wire has always been the easiest to setup/use. With Linksys acting up a lot, but only if used in conunction with older (pre-2Wire) AT&T DSL routers. Cisco I usually recommend as it's mostly hookup and you're set (if you run the disc, which many people forget to do). Recently I've tried out the Amped products (for work) and have been more than pleased with those, the range is insane. But they are kind of pricey (as in $120+ for pretty much all their products).
[ link to this | view in chronology ]
Open Source
[ link to this | view in chronology ]
Re: (...not sure they have routing capabilities).
[ link to this | view in chronology ]
Re: Re: (...not sure they have routing capabilities).
[ link to this | view in chronology ]
Looks like they'd prefer me to continue not giving them money in the future as well! I hope that works out for them.
[ link to this | view in chronology ]
I hate how "connected" everything is today
How long before there is a revolution of people cutting the cord from all devices, not just their cable?
[ link to this | view in chronology ]
Re: I hate how "connected" everything is today
[ link to this | view in chronology ]
Re: Re: I hate how "connected" everything is today
The easiest way to stop this busted machine is to give up your so called comforts and stop using everything they control.
It would only need to last for several days to a month. Then the rebuilding can take place. The system needs to die so that a better one can take its place. Death is lifes change agent.
[ link to this | view in chronology ]
Exploitable Back Door?
BTW, thanks Cisco for increasing my workload on an already busy week. I also doubt that the MSP I work for is ever going to buy another Linksys/Cisco router for the four dozen small businesses we manage moving forward. Just a flash in the pan, I'm sure, but how many other IT management companies are going to feel the same way?
[ link to this | view in chronology ]
I bet they won't pay for my bandwidth overages either.
[ link to this | view in chronology ]
The day will soon come when this is the standard:
Or, if we decide to no longer support your particular router model, you will also lose all functionality. In that case you will need to buy a new router.
Thank you for your support (and your money, please pay again).
[ link to this | view in chronology ]
Great Cisco Firewall of China : Status Expansion
Selling Routers to China, for the ‘Great Firewall’, wasn't enough to deserve spite.
I wonder who this surveillance system is marketed to ?
Who is buying it ?
And who are the victims to be spied on ? (wait... that's us )
Looks like code for...
All your privacy are belong to Cisco *(people who buy it from Cisco)
Who are they selling that to again?
[ link to this | view in chronology ]
Re: Great Cisco Firewall of China : Status Expansion
China? RIAA? a Brazilian Cartel? According to their EULA, anyone they dam well please.
[ link to this | view in chronology ]
Re: Great Cisco Firewall of China : Status Expansion
Just a guess but isn't Cisco's stuff made in China anyway?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Worth their salt?
[ link to this | view in chronology ]
Corporate IT dealbreaker
http://www.techdirt.com/blog/wireless/articles/20110417/21485513927/smartphone-apps-qu ietly-using-phone-microphones-cameras-to-gather-data.shtml
[ link to this | view in chronology ]
Re: Corporate IT dealbreaker
[ link to this | view in chronology ]
Re: Re: Corporate IT dealbreaker
[ link to this | view in chronology ]
or something like that
Stay classy
[ link to this | view in chronology ]
[ link to this | view in chronology ]
So long Cisco, you just couldn't resist, could ya?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Let em know
[ link to this | view in chronology ]
usually I would rejoyce you for it !
Subscriptions to spam or the box filled up to auto deletion ?
Cause you do know.... Cisco don't give a shit about PR ? (like Carreon)
An angry email will do fuck all to change them.
Unfortunately......
Even subscriptions or filling the email box will likely fail.(it's Cisco)
They did screw over EVERY single Chinese internet user.
Interesting fact:
There are way moaar internet users in China, than there are people in the U.S.A
[ link to this | view in chronology ]
Re: usually I would rejoyce you for it !
Provide an outlet for pissed off users. It may mean nothing. But damn it felt so good [smoking cigarette.]
They may blow it off, but if you take an account that is used to getting say 1000 emails a day and triple it, someone will notice.
[ link to this | view in chronology ]
Got to try
I mean...I really can't see Cisco giving a shit.
You can, and that's great, at least you are trying.(unlike me)
Honestly, I hope you are right and I am wrong.
But please don't let my opinion take away from your valued contribution.
If you are right, Cisco might listen and change, for the better of humanity.
And to other peeps lurking this thread..... email Cisco ( go go go)
[ link to this | view in chronology ]
Re: Got to try
Ditto with this one.
The tone of Cisco's posting is one of a PR department caught with its pants down and with no way out of what's already happened. BUT I'd say that the that this "press release" posting changes the terms and conditions statement that they can share everything but the pictures you take of yourself in the shower to that they can't share a bloody thing. Not that it will change anything. But I'd be sure to let Cisco know via email that you keep a copy of that that's your interpretation now if you chose and keep it.
Bloody hell!
[ link to this | view in chronology ]
[ link to this | view in chronology ]
buy a loophole.
Trust your instinct, you are 100% correct.
It's who they are selling the intercepted data to, that is the real question.
Could be Obama, could be the banks, could be the oil companies, anyone who can gain something from spying on you.
Corporate governments are great for non-human people.
Who cares if Cisco spy on people, they paid the politicians already.
About $2 million every year. ( the cost of your privacy to politicians )
http://www.opensecrets.org/lobby/clientsum.php?id=D000000374
[ link to this | view in chronology ]
What I don't understand...
What I don't understand, though, is what benefit comes from this functionality? Easy remote administration of these routers has been possible out of the box for many years without involving a third-party server, so that's not the benefit.
If you have so many of these things that you need a central server to manage them all conveniently, then what you have isn't a consumer installation at all -- it's an enterprise deployment, and these devices aren't meant for you and won't make your life easier, so that can't be the benefit.
As near as I can see, this cloud router stuff brings no benefit at all, let alone enough to outweigh the drawback.
I also can't for the life of me figure out what their target market is, unless it's people who are dumb enough to think that "cloud" always means better.
[ link to this | view in chronology ]
Re: What I don't understand...
[ link to this | view in chronology ]
Re: What I don't understand...
[ link to this | view in chronology ]
It's not Cisco's (firmware developer) fault on this one.
[ link to this | view in chronology ]
Re: It's not Cisco's (firmware developer) fault on this one.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
Cisco cannot be trusted, and their entire product line should be avoided.
[ link to this | view in chronology ]
Cisco must have a drive-thru....cause they F*CK you at the drive-thru!
[ link to this | view in chronology ]
This is spyware
And it's a very good reason for replacing your firmware with open-source software -- which isn't perfect, of course, but at least gives you some assurance that YOUR hardware won't be silently manipulated by a corporation that cares nothing for your privacy, your network integrity, or your operation.
Now here's the question: how long until Cisco pushes this spyware onto enterprise routers? C'mon, it has to be obvious to everyone that they want to: the only question is how and when they're going to try to pull it off.
[ link to this | view in chronology ]
Cisco as IP police?
"As a condition of your use of the Service, you agree that your use of the Service in accordance with the terms and conditions of this Agreement is permitted under and will comply with the applicable laws of the country where you use the Service. You agree not to use or permit the use of the Service:... (iii) to infringe another's rights, including but not limited to any intellectual property rights... (vi) to violate, or encourage any conduct that would violate any applicable law or regulation or give rise to civil or criminal liability."
followed by
"While we are not responsible for any content or data that you choose to access or otherwise use in connection with the Service, we reserve the right to take such action as we (i) deem necessary or (ii) are otherwise required to take by a third party or court of competent jurisdiction, in each case in relation to your access or use or misuse of such content or data. Such action may include, without limitation, discontinuing your use of the Service immediately without prior notice to you, and without refund or compensation to you."
Add to this the line from Cisco Cloud Connect Privacy Supplement
"Cisco may collect and store detailed information regarding your network configuration and usage"
and we have a nice way of taking people offline for potential IP infringement.
[ link to this | view in chronology ]
Re: No but this letter might get something from them.
The role of collecting configuration data is for support as is usage to a small extent. Though it would be nice if they actually got off their butt and said that. From some 35 years of supporting telco data and voice stuff it it was always better to know configuration of gear than not so that I could get in the back door and have a look because some 80% of the time a trouble call on a key system or switchboard was some change the customer made that caused the problem. For data that's closer to 100%.
Anyway, here's nice sample email:
Dear Cisco,
I feel your pain at swallowing both legs up to your hips but can you imagine mine at not being able to log into my router now. Not to mention some of the bad wording in the Terms and Conditions of Use that seemed to leave me wide open to you sharing everything about me with the world.
I appreciate the clarification on your blog at:
http://blogs.cisco.com/home/answering-our-customers-questions-about-cisco-connect-cloud/
that cleared up some of my concerns however you may be assured that from this point forward I will no longer use Cisco devices in my home or recommend them for any other home or small business. You have lost the good will that you've built up over 30 years with me and a number of others who I've spoken with and we all agree that no matter the technical advantages of your routers we can no longer use or recommend a router whose maker chooses to treat its customers and users in such a cavalier manner.
Attached is my receipt for my router and plug ins for each of my computing devices including smartphones and I expect a cheque in return as a full refund as the router and all Linksys devices in my home will be put in recycle in an unusable condition to prevent anyone else from suffering through this.
Yours Truly
One Immensely Pissed Off Ex Customer.
[ link to this | view in chronology ]
Cisco has reached the list of 'never buy' products. At this point they will have to show me something else that really means something. Taking down a paragraph or two with plans to possibility re-instated it later, tells me all I need to know. Since people often refer to me on equipment and products to buy, I promise Cisco will feel the pinch from more than just one.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Because the Feds Said
The Government needs to have these type of systems in place and the Furor subsided by the time they're open for business...Just Sayin.
[ link to this | view in chronology ]
Well, it's kinda an improvement.
It's too bad dd-wrt won't run on these new routers.
And as far as "running apps on your router" I have a few routers w/ OpenWRT I do just that with... but they're *my* apps adding what functionality I want to my router.
Looked up a review or two, and it seems to me that they want to do for the router what Apple and Android did for the phone with this "app" thing.
[ link to this | view in chronology ]
cisco router update
[ link to this | view in chronology ]
Something so invasive SHOULD BE OPT IN **NOT!! OPT OUT** It will be a cold day in hell before I ever even consider buying any product connected to Cisco.
I'm so pissed off right now :( The idea of recording data by default enrages me. The idea that a bunch of people are going to have no idea they are doing it enrages me even more.
What can I say?..
Fuck you Cisco! I hope you greedy communist fuckers go bankrupt.
[ link to this | view in chronology ]
[ link to this | view in chronology ]