ASUS rolled out an update to its firmware (3.0.0.6.102_34791) that now requires users to be over the age of 16 and to send a slew of metrics and data back to ASUS. If you do not agree or do not check the box to verify you are 16y or older, you cannot use the router. At this time, I’m not sure if ASUS has meant to disable the router for anyone under 16 or if it’s a bug.
You can opt out at any time but lose access to a slew of features:
Please note that users are required to agree to share their information before using DDNS, Remote Connection (ASUS Router APP, Lyra APP. AiCloud, AiDisk), AiProtection, Traffic analyzer, Apps analyzer, Adaptive QoS, Game Boost and Web history. At any time, users can search the contents of the terms at this page or stop sharing their information with other parties by choosing Withdraw.
Moreover, ASUS disables automatic firmware updates and worse, all security upgrades unless you opt into the data sharing. Security upgrades perform the following:
Security upgrade incorporates security measures that continuously update its security file and scans to protect against malware, malicious scripts, and emerging threats in order to secure the router and ensure system stability. Some upgrades addressing important security issues or meeting legal/regulatory requirements will still be downloaded and installed automatically, even if “Security Upgrade” is turned off.
Edit: I have personally contacted their CEO’s office, but if others would like to voice their disapproval as well, here is a link: https://www.asus.com/us/support/article/787/
Is Asus just asking to have a shitload of lawsuits?
It doesn’t seem like they give a shit. This is the company that strong armed NexusGaming with their repairs and have scammed a slew of people thru their warranty system.
If you search for “ASUS repair scam” they have a sorted history of this kind of douchery.
Watching the GN video was insane because I had that exact same experience with ASUS 10 years ago. Back when they made the Nexus 7. I had to RMA 3 of those dam things and each time I had to go through that song and dance with the RMA forms. I think when the 4th one failed I just gave up, recycled it, and moved on from this company as a whole.
Looks like nothing’s changed, which means this way of treating their customers is endemic at this point. They’re a lost cause.
My experience was similar, but I gave up after my first RMA because I saw everyone else going through the same thing. The N7 started as such a delight and ended up as one of worst product experiences.
That’s brutal that they get away with that crap. I will never buy anything ASUS branded again. They are on my embargo list now, right under Sony, which I haven’t purchased a single thing from them for about 18 years since they screwed me out of repairs on my phone. Only way IMO.
And in return Gamers Nexus is teaching all of their viewers what their consumer rights are, and how to report fraudulent activity to the proper regulatory authorities. This isn’t the first time Gamers Nexus has gotten regulatory agencies involved with computer part manufacturers fucking over customers, and the history of those incidents didn’t go very well for other companies involved.
On the other hand Gamers Nexus has also gone out of their way to point out companies that have done the right thing when issues came up, to make sure those companies are getting kudos for NOT fucking over consumers. Because sadly that’s all we really want.
If the FTC gets enough complaints to warrant the manpower to investigate ASUS warranty fraud, there is no doubt in my mind that they’re gonna be fucked based on what we’ve seen so far.
Yes.
How many 14 year olds can afford a lawyer?
All you need is one lawyer in this case to handle the class action lawsuit that would follow. There is power in numbers.
A class action lawsuit with a related FTC warranty fraud investigation is a pretty tough thing to fight.
No need, they can just lie :)
Give it a minute: Tech Jesus and his Nexus friends are having a great time with ASUS recently. I’m sincerely looking forward to how far they take things.
Who is this “Tech Jesus”?
Stephen Burke, Editor-in-Chief and founder of Gamers Nexus. They do computer hardware reviews, consumer advocacy and sometimes even investigative journalism. Steve has a majestic mane, earning him that nickname.
See https://gamersnexus.net/ and https://www.youtube.com/@GamersNexus
Ah, fair enough.
Asus would do good in hiring a real lawyer. Parents accept, kid uses router, data collected of child, illegal. So easy to rip them a new one.
Asus went the bad way. Check out louis rossman vídeos about asus, héroes one of them. https://www.youtube.com/watch?v=NHQqKi9NcTs It is a company to be avoided. It went the non ethical way.
It went the non ethical way.
Sadly, you can swap Asus with pretty much any popular company’s name and it still holds true.
Gamers nexus mentioned two decent brands (arctic and fractal) in their most recent video about Asus.
https://www.youtube.com/watch?v=uYdtpU8FKO8 around the 11:11 mark
But yes, sadly most popular companies seem to be garbage nowadays.
Yes… But some more than others
Every other company seems to charge for parental controls. It’s so stupid, I don’t need another fee just because I have a child in my life.
I wanted to degoogle, so I looked for a new router and ended up with an Asus.
If I bought one of their routers and this came up, I would simply be returning it and giving the person at the counter a printout as to why. Sorry, but this router is not “suitable for purpose”. Look up that phrase and “merchantability”.
Agree. Straight back for refund. In Australia we can legally choose the manufacturer, or the retailer. I’d go straight to Asus, to give them the message directly.
For the downvoters, in the US:
https://www.findlaw.com/consumer/consumer-transactions/what-is-the-warranty-of-merchantability.html
The implied warranty of merchantability guarantees that a product sold to you will work for its intended purposes. In other words, it means you can expect a toaster to toast your bread. If it doesn’t, you have legal protection against losing money on a product that doesn’t work.
If you bought the router expecting it to work as advertised, you may make a claim if it doesn’t. They would have to spell out ahead of time what the limitations and requirements are in order to avoid trouble.
You have no claim. The update does not disable the router and even if you opt out, the router itself still functions, except with a few additional features missing. Telemetry and data collection does not void a warranty. There is no claim here.
That would be for the legal system to decide. If you purchased it for a specific advertised feature, and that feature was disabled unless unspoken terms were agreed to, you would have a case.
That depends on how the product is marketed. If the product has any of those disabled features on the box and doesn’t outright say you need to send them telemetry data to use it, then you could argue that you bought it for that feature and can’t use it.
For instance, maybe I want to use the VPN feature, so I bought a router that supports that. And now I’m locked out of that feature unless I agree to a miles long privacy policy and sharing my telemetry data.
Plus, the lack of security updates is, at best, extremely concerning. The firewall’s primary function is to act as a first line of defense against attacks coming in via WAN. They have locked those security updates behind the telemetry sharing, and therefore it can’t even be used as a proper firewall.
Protecting your network from internet-bound threats is one of the most important jobs of a router, and that involves receiving security updates. Once your router no longer receives security updates, you should stop using it.
I would rather not have less options in this world and force companies not to be dicks. I guess to each their own. My router is also 2y old so no returns available.
Okay ASUS is out. Recommendations?
There’s a few routes (pun intended) you could go.
DIY with opnsense on an old PC will give you the most flexibility and will allow you to build your router to your exact needs.
Ubiquiti is also another choice albeit a contentious one. Their hardware is pretty good which also doesn’t require a recurring charge to use (unfortunately rare when you get into the enterprise grade gear). The software side is where people have such mixed feelings as for consumers and prosumers it’s pretty good but when you start getting into enterprise level configurations you’ll find their software pretty lacking. For example if you need a L3 switch for inter VLAN routing you’ll want to go with a different vendor as ubiquiti’s L3 is practically broken.
And Ubiquiti’s support is non-existent. Don’t get me wrong, I like their hardware, and their software works just fine for my needs, especially at their price point. But if you have issues, you’re searching forums or are SOL.
Ruckus gear is pretty good too, though I don’t have much hands-on experience with it. And it’s expensive. Like really expensive.
I’ve actually never had any problems with their support the two times I had to RMA some dead products but maybe I’ve been lucky.
They’ll RMA just fine, but I was speaking more to software support.
You can also get a Celeron-based (for example with a N100) fanless mini-pc meant for use as DIY routers like these and install something like pfSense on it.
Personally my really old router still does what I need so I’m leaving it be, though I’ve replaced my media box and my NAS with a similar device running Lubuntu but can’t really make it also be the router since it only has 1 ethernet port.
Man, idk. I installed WRT Merlin in hopes this doesn’t make it there. OpenWRT is really hard to get onto routers. Even the ones that support it (which tend to be pretty dated) have a ton of hurdles or restrictions as manufacturers really don’t want to lose the telemetry.
Asus makes great hardware unfortunately. Some of the fastest and most performant routers out there. Moreover, they don’t rely on subscriptions to gate some of the features like pretty much every one else.
I tried TP Link and Netgear (if their “legendary” Nighthawk) and the Asus just blew them away on every level. Especially stability and reliability.
deleted by creator
Something with OpenWRT. Turris Omnia is pretty good.
Synology seems ok to me.
I remember seeing that Openwrt is working on getting their own hardware sometime in the future. Might be worth looking at when the time comes. I’ll stick with merlin until that goes the same way.
never use stock router firmware
Any other open source alternative you recommend?
Usually it’s OpenWRT
openwrt or ddwrt
openwrt
Next DEFCON is in two months, can’t wait to see them get absolutely pwned.
Top level comment to remind the Open WRT fanboys that this ASUS router uses a Broadcom chipset, which is not supported on OpenWRT. Been seeing it recommended by a lot of replies to comments when it won’t be helpful in this case, since Broadcom chips don’t have open drivers
However, freshtomato is another router firmware, that isn’t as feature rich or well supported as opwnwrt, but is focused on supporting broadcom chipsets.
https://wiki.freshtomato.org/doku.php/hardware_compatibility
I flashed it to my netgear router with a broadcom chipset, it works wonderfully!
Yeah I’ve stayed out of those because it’s just felt like a knee jerk without actually even reading anything. “Someone said something critical about a router firmware, quick put OpenWRT on blast!” 😏
deleted by creator
Unfortunately, lots of ASUS routers (especially the “gamer” oriented ones) use Broadcom chipsets. Broadcom support is severely lacking, (because Broadcom has refused to allow open source drivers) so in many cases switching to openwrt will severely cripple the router. Even basic shit like WiFi will stop working, because there isn’t a WiFi driver available.
deleted by creator
Fresh tomato does Broadcom.
This is why I never used to recommend Merlin WRT.
The ones you should look into are OpenWRT (my favourite), DD-WRT, tools like OPNSense or the more sophisticated Ubiquiti.
deleted by creator
THE YEAR OF OPENWRT!
/s not /s
The data sharing persists even with merlin. I get a prompt about it as soon as I tried to enable those advanced features. I still get updates though.
That was the case before the update, but they didn’t bar security updates and firmware upgrades or not let you even into the router without consent. I had those disabled but the update makes opting in mandatory.
Merlin
That thread isn’t about Merlin firmware?
Here are some screenshots from my router administration pages. Notice the “Powered by Asuswrt-Merlin”.
In the first image you can see that I have a particular feature disabled.
When I toggle it on I receive a warning that my information will be collected by Trend Micro.
I included another screenshot showing the location where I would withdraw my consent to having my data collected, were I to actually use the advanced features of the router, that I thought I was paying for at the point of sale. Instead I was apparently paying for the privilege of having the option dangled in front of me, behind an agreement for yet another, separate company to collect my family’s data.
Yeah but that’s not new, that has existed for years even in Merlin firmware. People were saying that this affects Merlin but I’m not seeing any indication of it yet.
Yes I know ASUS is shitty and evil, and it sucks that those features are gated behind abandoning your privacy, but I was saying that part isn’t new, and I don’t think this new stuff affects Merlin yet.
We’ll see how it all plays out, though.
Sorry about that. I guess I completely missed your point that you were referring to data sharing only via the new “agreement” getting foisted on people. Fingers crossed it doesn’t get into Merlin.
