Up front: I'm not suggesting an evil plot or anything, I'm just raising this as an issue of concern.
Unlike routers and modems, which are widely scrutinised (or not so scrutinised), the Flukso sort of flies under the radar.
So, there is this device that I just bought, and I like it very much because it helps me to save money. The device sits on my LAN and talks to the Internet. Because it sits on my LAN, it sees every packet that goes across that LAN. Moreover, the device can do anything it likes, such as finding open ports on machines on my internal network. (Like most people, I do not tightly secure devices that are behind my firewall.)
From what I've read, the Flukso's firmware can be updated over the net too (which is something that most other network appliances won't do without user intervention). So, just theoretically, I could spend a lot of effort examining the Flukso, see whether I can find a way to update the firmware myself, and go ahead and do that to every Flukso on the Internet. Presto, instant perfect backdoor.
As far as I can see, this raises two issues:
One: I need to trust Flukso.
No problem, I do. I implicitly trust the manufacturer of absolutely every device that can connect to my network. (I don't believe in evil conspiracies.)
Two: I need to trust Flukso that the firmware update mechanism is secure enough that a third party cannot subvert it and install their own firmware.
That second point is much like the issue with UPnP routers. Every time I add a device that connects to my own network and can respond to incoming requests from the outside world, I'm not only trusting that the company who sold me the device has good intentions, but also trusting that the same company is competent enough to ensure that no-one in the entire world can subvert the software they have installed on the device.
As a software engineer and network programmer with nearly 30 years experience, I think I can safely claim that making such a guarantee is damn near impossible.
Any thoughts on this from Flukso?
The remote firmware update is extremely convenient, and I can see why Flukso wants such a thing. But the potential consequences of having this go wrong are extremely serious.
What guarantee do I have that no-one (absolutely no-one), will be able to subvert the protocol that updates the firmware, or subvert one of Flukso's servers and substitute a firmware image of their own making?
Cheers,
Michi.