Norton Announces Core, a Smart Router To Protect Domestic IoT Devices (cnet.com) 119
fiannaFailMan writes: Norton has announced the launch of a smart router designed to protect connected home devices from intrusions. The Symantec-owned company says the device aims to keep safe up to 20 devices connected to it, including Windows computers, Macs, phones, tablets or any internet-of-things devices, in real time. Norton Core, shaped a little like a geodesic dome, can isolate an infected device from the rest of your network to prevent the spread of any malware. Some of the technical specifications include a dual-core 1.7GHz processor, 1MB of system memory and 4GB of flash memory, and the latest 4x4 AC2600 Wi-Fi standard, with a top speed on the 5GHz band of 1.73 megabits per second and up to 800Mbps on the 2.4GHz band. It also features four Gigabit LAN ports and can cover between 3,000 and 5,000 square feet.
Re: (Score:2)
Promise you'll block my Windows 10 PC from calling home and I might be interested.
Re: (Score:2)
Norton? Really? (Score:3, Funny)
So I guess it's acceptable for this to let practically everything by while slowing down the network to a crawl?
Re: (Score:1)
Norton? Uh-oh. (Score:5, Funny)
1) Install Norton security router.
2) Discover that your electricity bill is now $3000 per month and every device that's connected to it runs verrrrryyy slowwwwly.
3) Attempt to remove it from your home, and find that no matter how many times you do so, bits of it are still left under your couch, inside the walls, glued to the ceiling...
4) Realize that removing it from your home properly requires complete demolition and ground-up rebuilding.
No thanks.
Re: (Score:3)
Re: (Score:2)
You'd have that problem even if you applied Norton-standard pre-emptive fault finding to the device before unpacking it. (1kg of C4 explosive followed by a wash with red fuming nitric acid.)
Security Theater (Score:5, Insightful)
So the attackers will just have to buy one of these to make sure their malware passes, just like they do already with desktop AV? I guess that's good for Norton's bottom line.
Re: (Score:2)
Re: (Score:2)
An entire megabyte? (Score:2)
Does It Have The Bitmap? (Score:2)
Does it have the Peter Norton bitmap on the case or packaging? That's an essential part of any 'Norton' product.
Re: (Score:1)
His books on DOS programming were substantial and well done as well.
It was doubtless a pretty rewarding sellout, and what they've done with his bitmap since was probably worth it for what they paid.
CVE-2017-666 (Score:5, Insightful)
How many days till we see an advisory for Norton core enabling attackers a method of leveraging Norton core to compromise systems it is supposed to be protecting?
http://fortune.com/2016/06/29/... [fortune.com]
Also apparently if you don't renew your subscription your Norton paper egg turns into a Norton paper weight as they disable all access controls on spite not just the scanning/heuristic subscriptions but basic ACL shit too.
Assinine Design (Score:1)
From their FAQ:
What do I need to set up Norton Core?
For initial setup, you will need an iOS or Android mobile device that has Bluetooth (BLE) enabled and a data connection. Download the Norton Core app from the Apple Store or Google Play, open the app, and follow the instructions to complete the set up6. The Core app supports both iOS 8.0 or later and Android 4.4 or later.
Re:Assinine Design (Score:5, Interesting)
Re: (Score:3)
You... didn't think to call the front desk and have them read you the credentials? _Seriously_?
They told me I needed to use the QR code.
Re: (Score:2)
What did the QR code do? I've never seen a wifi system where the QR code did anything other than pass a URL to a device or pass a stock standard config string like: "WIFI:T:WPA;S:mynetwork;P:mypass;;" to your phone from which you could effortlessly read both the network to connect to and the passcode, not to mention that most popular QR code apps give you a confirmation showing you the data before you click continue.
Re: (Score:2)
Re: (Score:2)
Okay well that sucks. But really you're right to bitch about the front staff in any case. I've had my fair share of hotels with QR code for wifi access but so far only one didn't have a wifi password also written somewhere, and that hotel's front desk staff did manage to get me online.
What I hate more though is those stupid websites where you need to register. Extra negative points if it's run by a third party and it boots you off every 20min.
Re: (Score:2)
Re: (Score:2)
heh yeah. Reminds me of http://hackaday.com/2016/08/07... [hackaday.com]
Money Grab! (Score:5, Informative)
FAQ this:
What happens if I don’t renew my subscription?
"If you don’t renew the Norton Core Security Plus subscription in the second year, Norton Core will continue to function as a high performance router. All network, IoT, and device level security, plus parental control features will be unavailable if the subscription is not renewed."
Yeah, thanks, but I prefer my equipment to function for more than a year.
Re: (Score:2)
Sounds to me like it does still function after a year, it just doesn't have the extra security.
Re:Money Grab! (Score:4, Insightful)
Sounds to me like it does still function after a year, it just doesn't have the extra security.
So it continues to function except for the one feature for which you would buy this very expensive device. Why do I get the feeling I would be better off spending $40 on a TP-LINK router.
Re: (Score:2)
Probably then install openwrt on it, setup some iptables and dns filtering like pi-hole and configure some cron scripts and you replace 90% of the features.
or buy directly one new router and install openwrt directly :)
Not that I'm paranoid, but . . . (Score:2)
Yeah, I'm just being paranoid. Just 'cuz I'm paranoid doesn't mean they're not out to get me.
20 devices? (Score:2)
Twenty devices?
I've got 15 internet-capable devices in my house already - laptops, tablets, phones and media devices - so (were I clinically insane) I could max out this thing just by putting "smart" light-bulbs in my living room.
Are we supposed to have one of these per room?
Re: (Score:2)
20 devices isn't enough (Score:5, Insightful)
But here's a short list of most of what is connected to my WiFi Network and I plan on adding more in the future:
Haiku Homes Lights (40), Switches (10), and Fans (7)
Mitsubishi Ductless Heating System (4 Headers)
Ecobee (controls a Boiler)
Nest Thermostat (controls a forced air HVAC system)
Nest Cameras (4 Outdoor, 3 Indoor)
Nest Smoke and CO Alarms (4)
TP-Link Switches (2 lights, 5 others)
GE Dishwasher
Samsung Washer + Dryer
Sense Electrical Monitor
Amazon Echos (2 regular, 2 dots)
Yamaha Receivers (2)
Samsung TVs (4)
Google Chromcast (4)
Apple TV (2)
Amazon Fire (2)
Harmony Ultimates (2 Remotes, 2 Hubs)
My guess is people who are actively pursuing Smart Home Technologies will need much higher than 20 device capacity.
Re: (Score:2)
August Locks (2 Connect Modules)
Samsung SmartThings Hub
Re:20 devices isn't enough (Score:5, Funny)
Re: (Score:1)
You're gonna be fucked when your house becomes sentient.
Or when a Ham Radio operator moves in nearby.
Re: (Score:1)
You're gonna be fucked when your house becomes sentient.
I didn't see any connected sex toys there. That is a serious omission in this connected age.
Re: (Score:2)
You're gonna be fucked when your house becomes sentient.
That was his house posting using his account.
Re:20 devices isn't enough (Score:5, Funny)
You forgot the wife's Sybian.
Re: (Score:2)
For a wild time, pack all that up and move to one of those towns where all the people live who claim to be allergic to WiFi.
Re: (Score:3)
Re:20 devices isn't enough (Score:5, Funny)
Serious question......what benefit do you get from a dishwasher being attached to the internet?
Access to the Dish network?
Re: (Score:1)
Sometimes you have to wade through tons of mediocre Slashdot comments to find diamonds in the rough like this.
Re: (Score:2)
Serious question......what benefit do you get from a dishwasher being attached to the internet?
You can monitor how much time is left in the cycle, it will notify you if the rinse agent is low and needs refilling, and if you use dish detergent pods, you can have it automatically keep track of how many pods you've used and reorder pods on Amazon for you (similar to Amazon Dash Button) automatically when you are running low.
For more details click here [geappliances.com].
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
3 PC, 2 Laptops,2 tablets, 4 smart TVs, 4 Cell phones, xbox one, and PS4. Granted the PS4 and xbox one aren't used at the same time the smart tv features are but a regular family w/ 3 kids can hit that 20 mark fairly quick even without trying to automate the home.
Re: (Score:2)
- But seriously, you bring up a quasi valid point. There is a pretty severe deficiency between people who are going nuts over smart-home crap and the stock 'prosumer' grade all-in-on
Re: (Score:2)
You need wifi for washers? Why?
with a top speed on the 5GHz band of 1.73 megabits (Score:2)
How is is a shitty 5GHz wifi a selling point?
Re: (Score:2)
5GHz isn't shitty. It doesn't go through walls very well, but that is a different story. The shitty Band is the 2.4 GHz, which if you live anywhere civilized is crowded to the point of being non-functional. I can see at least a dozen 2.4 GHz WiFi APs on my scanner while sitting in my living room. I can see exactly three 5 GHz, with several bands available (no usage).
While coverage isn't great, the bands are more or less free from everyone else's crap.
Re: (Score:3)
5GHz isn't shitty.
It is on this router if it only does 1.73Mbps. I'm also curious about the 1MB of RAM. (Other pages indicate that it's 1.73Gbps and 1GB of RAM, which is in line with modern routers.) Another correction, it's got 4 gigabit ports total, 3 LAN and 1 WAN. This comes as a huge shock, but it seems the editors can't be bothered to proofread anything.
Re: (Score:2)
editors can't be bothered to proofread anything
Welcome to Slashdot, you must be new here! ;) (yes, this is a joke)
yea, so.. (Score:2)
Titanium and gold are two different metals - sigh. (Score:5, Funny)
The Norton Core comes in titanium gold and granite gray.
I hate marketing people.
Re: (Score:2)
Re: (Score:3)
They might as well have offered it in Titanium Gold and Gold Titanium.
Reminds me of when I had a 1969 VW Beetle. They have one double-arrow dashboard indicator for the turn signal, with only one bulb. A friend once asked how do you know if it's indicating left or right? I said, completely seriously, for left it blinks off first then on and for right it blinks on first then off. He stared at me looking really confused. I went through it twice more before he realized it was BS. Good times...
Re: (Score:2)
Re: (Score:2)
The Norton Core comes in titanium gold and granite gray.
They should at least keep the different-same theme going and use "granite marble".
Re: (Score:2)
Alloy
Re: (Score:2)
Alloy
Then, according to the CERN writing guidelines [web.cern.ch] (and others) that would be "titanium-gold" so bzzzt... thanks for playing :-)
Chemical compounds
Chemical compounds and alloys should be hyphenated, but the elements should not be capitalised:
The current in the dipole magnets is carried by cables made of niobium-titanium (NbTi).
Re: (Score:2)
No one has to follow CERN writing guidelines.
So it is just a Router and Firewall (Score:3)
This is just a home router and firewall. It isn't like a whole class of systems already do this.
Maybe it adds deep packet inspection, or gives you reports on the exact attacks that have been blocked - but so what? What exactly does the average home user need to know about blocking the hundreds of attacks your average home based IP per day?
Re: (Score:2)
One thing I wonder - does it support IPv6? Or is NAT their idea of enforcing security?
Re: (Score:2)
It seems to be doing DPI on packets it thinks are IoT related, and matching them against a database of known exploits. Much like now Norton AV works, i.e. slow and ineffective.
Re: (Score:2)
your conversations? That's the first thing I thought of when I saw the "geodesic dome shape" description. Sorry, no Amazon Echo for me and no Norton microphone router either. Kthxbye
No. But if you wear a tinfoil hat I hear that can stop such things from working.
Privacy policy also quite interesting (Score:5, Informative)
What they collect (e.g. everything including Your F***ing passwords...)
Wireless network SSID/password (encrypted);
* Device information, including any Personal Information you include when assigning device name(s) and, if provided,
the name of the person to whom the device is assigned, and device user agent data/app user agent data, including
device type, manufacturer, and model; operating system; and IP address;
* Data regarding device usage, including data regarding the time of last device use, internet usage time for each
connected device, and gateway logs detailing network connection activities;
* Website addresses for parental control settings, including blocked websites, visited websites, and time and content
filter information;
* Personal Information you may enter into your profile, including username and your picture;
* Personal Information you provide for customer support and connectivity assistance, such as userID, name, role,
policies, and device information;
* Attempts to download executable files/mobile apps;
* Shipping address and related information.
What they do with it...
* Norton Core uses Google Analyticsâ(TM) Measurement Protocol with IP anonymization parameters to transmit critical error
information (including IP address) and information on your feature usage services (âoeNorton Core Telemetryâ) to Google
Analytics, which is not owned or operated by Symantec.
* Understanding product usage and alerts to inform you of better ways to benefit from a productâ(TM)s features
* Statistical analysis of product deployment
* Providing us with business and marketing information
How they use it...
* We are a global organization and may transfer Your Data to other countries, including countries that may have less protective data protection laws than the country in which you are located.
* may be disclosed in connection with any proposed or actual sale or other transfer of some or all assets of Symantec in the event of a reorganization, merger, acquisition, or sale of our assets;
* may be disclosed and shared if we are ...Here they are clearly saying anyone in law enforcement can simply request data and receive it even if not required by law...
required to do so by law or in response to a request from law enforcement authorities;
* To promote research, awareness, detection, or prevention of security risks, Symantec may disclose Your Data to relevant public
and private entities such as cybersecurity or identity theft research organizations and security software vendors.
Apparently also customers responsibility to make sure their down line users and guests are informed their data is also being collected. Note that "your disclosure" actually means going to the management portal and configuring a new device.
It is your responsibility to ensure that any disclosure by you to Symantec of Personal Information of your users or third parties is
in compliance with applicable privacy and data security laws, including informing users and third parties that you are providing
their Personal Information to Symantec, informing them of how it will be transferred, used, or processed, and gathering
appropriate consents and other legal measures required for such transfer, use, or processing.
Re: (Score:1)
Working for the "Empire" (Score:1)
Now we finally know what those things are that sit on top of the Imperial Star Destroyers....
Re: (Score:3)
no that is what is left over for user apps after all of the Norton bloat.
What IS a recommended secure wifi router? (Score:1)
Honest question: what IS a good, secure router. I need a new one (old one just died). Given the new router attacks, I went looking for a secure router. The Wirecutter did an overall decent job, but security of the router itself wasn't touched. I found routersecurity.org, and the one they recommend (Peplink Surf SOHO) is a bit pricey (but the security sounds impressive).
Re: (Score:3)
Buy CCTV or some other vital IoT that will talk to your cell phone without needing the internet when altered.
Remove all the things from the network that need the "internet" when not at home. Be able to chart, log, respond to changing network conditions when at home.
Get away from wifi and upgrade to ethernet to connect only important devices.
Get some AV to test your network. Something like https://www.avast.com/f-hom [avast.com]
Re: What IS a recommended secure wifi router? (Score:3)
Depends on the kind of security you're looking for. I'm generally a fan of the Asus family of routers that support the Padavan firmware - they all support DD-WRT as well if that's your thing.
What makes this router something warranting a slashdot discussion is the fact that it does unified threat management, something that tends to require an appliance beyond a simple router/switch/AP combo. The cheapest ones with integrated Wi-Fi are from Sonicwall, but they're all kinds of awkward to have in a home setting
Reinventing the wheel (Score:1)
Its literally just a pfsense box with snort installed.
What a sham.
Safer Routers? Make 'em here! (Score:1)
Does not offer 100% protection (Score:1)