Hello.
I am unclear on;
1. Is this Kong mod a modification of a dd-wrt (version ?)
2. Is Source Code available (where) for this mod
3. Are hash sums available for the source/mod ?
Best regards.
Source Code Location
Member
- member since: 02/28/2010
- rank: 5 of 28504
- 1 articles authored
- 27 forum threads started
- 1023 comments
May 31, 2011 3:06 PM
updated: May 31, 2011 3:31 PM
Hi Dennison,
my mod is basically a rebuild of dd-wrt with different settings, e.g. removed features to save space, but compiled with -O2 to speed up things. Whenever I fix some code I supply the changes directly to the individual maintainer of the app e.g. patches submitted via dd-wrt trac or I add enhancements which are already in dd-wrt's trac but not included in the releases.
As for the gui changes these come directly with the firmware and are located under /etc/config
Only thing that is not public available is my build script. This script for examples copies a out of dd-wrt precompiled binary of minidlna inside the firmware.
Regarding md5sums these are supplied whenever I announce a new build. But it is not possible to use the md5sums to copare the output of the compiled source as for each compile the internal build timestamp changes and thus produces a new md5sum everytime it is built. You could only do a binary compare to see the difference.
To be 100% sure that there is no backdoor inside you have to get the sources review them and compile them yourself. This applies to any Open/Closed Source software.
June 3, 2011 10:47 PM
Kong,
Thank you for your reply.
When you post firmware, is there a standardized location to refer to
for future accompanying source code?
I was trying to locate source code for another of your mods but
there wasn't a link included in the info page.
Regards,
Dennison
Member
- member since: 02/28/2010
- rank: 5 of 28504
- 1 articles authored
- 27 forum threads started
- 1023 comments
June 8, 2011 8:32 AM
The best source is dd-wrt svn itself, they'll add my patches to the core, except for the things I build out of tree, e.g. minidlna, those can be downloaded like any other linux app and built using a cross compiler.
If dd-wrt switches to git I would be able to setup a fork for easy syncing/merging
June 9, 2011 9:38 AM
Kong,
Your passion and dedication for patches is commendable, and appreciated.
Please be sensitive to those of us who do not build the firmware.
If I have to download the whole subversion tree and search for your build, it may produce zero results, considering the repository contains the sources for several linux kernel versions for each hardware platform, and your build might not be included at all.
The source code locations are obscure and difficult to find at best. It's most beneficial for us if you would simply supply a quick "link" when you post firmware in this forum.
Maybe I misunderstood you... do you "Only" supply patches to dd-wrt, then wait for them to rebuild, then you post the link to the final result in this forum?
Is there some reason why you cannot post a link to the source code for your most recent build for;
http://www.myopenrouter.com/download/19806/DD-WRT-Kong-Mod-USB-FTP-miniDLNA-S...
Please provide a link here if you do not object.
Thank you for your attention to this.
Dennison
June 12, 2011 7:04 AM
updated: June 12, 2011 7:06 AM
It's been almost 3 weeks since I have asked where the source code is for this mod. (May 24, 2011 11:58 AM) without a link to where it is .
Some conclusions;
*You do not want the location to be known.
*There can be no confidence in using your 3rd party mod instead of the vendor's router firmware (Netgear, Cisco, D-Link, etc.) or instead of DD-Wrt.
*Your mod is 'not' open and you are unresponsive to disclose the location of your source code.
*DD-Wrt is responsive, and does disclose it's source code.
[CLOSED]
I'll not pursue this misleading firmware any further.
Member
- member since: 02/28/2010
- rank: 5 of 28504
- 1 articles authored
- 27 forum threads started
- 1023 comments
June 13, 2011 8:33 AM
Hi Dennison,
if you expect answers to your questions with 24h you have to go and hire some to work for you. For me this is purely a hobby. Sometimes a have 1-2h a day for this sometimes I don't have time to work on this for weeks. I'm not earning anything with this.
Since dd-wrt uses svn (I have no write access) there is no easy way to share my changes unless I openup a new repository which is not beneficial to dd-wrt. It would mean nobody can easily merge,sync etc. with official sources anymore. Thus I sumbit my changes as patches to dd-wrt and of course create my builds sometimes before those patches are included in the latest dd-wrt builds. This means my sources are included into dd-wrt.
If you install binary firmwares you have to trust someone, sourcecode is no guarante for a trustable binary unless you compare bitwise. Therefore if you are looking for 100% security you have to compile the firmware yourself and read each line of the sourcecode. I also have to trust dd-wrt or linus torvals not to add any rogue code to the base.
If you are looking for a tar.gz, that you can just download and compile via once click I have to disappoint you. I don't intend to provide free guidance/support for anyone that wants to compile dd-wrt sources.
June 14, 2011 12:48 PM
updated: June 14, 2011 12:52 PM
Kong.
Some feedback for your benefit;
- Appreciation and recognition of your hard work has been mentioned in this thread, and no expectations or demands were placed or implied upon you, nor were you expected to teach anyone how to compile anything.
I think you are missing my 'trust' concept. A lot of us contribute our free spare time as a labor of love/passion in advancing our computing interests, as 'I' am in still trying to offer you customer feedback after 3 weeks. It appears to irritate you and is interpreted as demands.
My intention is/was for you to pick up on the fact (you haven't) that when someone with a high vertical technical skill as you offers their product to the world, it's of everyones' best interest to provide an equal level of follow-up communication.
You are going through the effort of replying to this thread, but in my opinion it's not of use if you only answer parts of the questions and ignore others, as you did. This can be enough to provoke a response of suspicion, mistrust.
You explanations are appreciated, although it took over 3 weeks to finalize.
The fact that you are only one, unpaid, have no others working for you, are not held to any standard for posting on this website, and that this board is not directly endorsed by Netgear (possibly others) makes it impossible for me to use your work in a business capacity.
Continued good luck on efforts.
Dennison
Add Your Reply
Sponsored Links
Copyright © 2012
Capable Networks LLC.. All Rights Reserved.
RSS |
Privacy Policy |
Advertise With Us |
Terms of Use |
About Us |
Contact Us |
Site Map
Our Capable Community Network:
DVR playground |
Explore3DTV |
MediaSmart Home |
MotoDash |
My Open Router |
Pogoplugged |
DijitCommunity |
Robo Community |
Sansa Community |
TechLore |
TiVo Community |
TouchSmartDevZone
MyOpenRouter.com is not affiliated with NETGEAR®. NETGEAR is a registered trademark of NETGEAR, Inc. in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective holder(s). © 2011 NETGEAR, Inc. All rights reserved.
This is a wonderful site for 3rd party firmware resources.
I would offer a caution however... "open router" does not necessarily mean the firmware is "open source" unless the source code along with hashes for download verification is also provided.
An argument could be made that if the intention is to obtain more security via inspecting the source code for 'any' 3rd party firmware (Netgear does not offer any source code for this model NWR3500L)... it would not be possible unless the source code is made available.
I am energized to experiment with the additional features available from all the hard work invested in the 3rd party firmware replacements from this site... the only way firmware trust can be achieved is if we can see exactly what you are doing by having the ability to inspect code if curious.
I am anxious to roll up the sleeves and get started this holiday weekend, is there any possibility the author might respond if they will provide a link to the source code and hashes... please.
Thank you very much.