The routers look the most common when they are placed in the corner of the living room. It receives traffic in home mobile phones, computers, cameras and smart devices, and software updates and remote management configurations, when they occur, affect not only the speed of the net, but also the Internet portal for the entire household.

原始来源 · tp-link.comTP-Link10月6日声明:反驳四州诉讼tp-link.com ↗

On 6 October, the Attorney General of Florida, Montana, Iowa and Nebraska, United States, filed a consumer protection suit against TP-Link. (a) The state of Florida ' s allegations that companies made misleading statements on router safety, product supply chain and relations with Chinese operations; Other states have related but not identical claims. The same day, TP-Link Systems Inc., registered in California, issued a statement of counter-attack, stating that the state government had filed a lawsuit based on the wrong premise, that the equipment was made in Viet Nam, that the company operated independently in the United States and had no ownership or control relationship with the Chinese Government and the Communist Party of China.

On 6 October, the Attorney General of Nebraska, Mike Hilgas, directly accused TP-Link of concealing ongoing business links with Chinese military contractors in his indictment announcement, and noted that a large number of parts of Vietnamese factories were procured through China. On the same day, the Attorney General of Iowa, Brenna Byrd, further listed the safe marketing statements used by the enterprises for the benefit of consumers. The two states complained not only about the existence of loopholes in products but also about turning corporate disclosure of supply chain and national security risks into a competition for consumer protection law.

原始来源 · ago.nebraska.gov内布拉斯加州总检察长10月6日起诉TP-Link的原始公告ago.nebraska.gov ↗原始来源 · iowaattorneygeneral.gov艾奥瓦州总检察长10月6日起诉TP-Link的原始公告iowaattorneygeneral.gov ↗

The four lawsuits were based on the fact that not one of the brand names was Chinese, but rather on the specific commitments made by the manufacturer to the purchaser to verify whether or not it was possible to verify them.

How the Consumer Protection Act entered the field of national security

原始来源 · arstechnica.comArs Technica:佛州等四州对TP-Link的民事投诉arstechnica.com ↗

The United States Federal Communications Commission introduced extensive approval restrictions this year for new consumer routers produced outside the United States, with many manufacturers being exempted or subject to compliance. TP-Link has not yet obtained the same access facilities as a number of competitors. The product authorization system of the federal agencies and the false publicity suits filed by the four cantons under the consumer protection law are two different procedures.

In addition to questioning China ' s supply chain, the petition also focused on marketing commitments. The prosecution alleges that TP-Link promoted the coverage of HomeShield security services in “all security situations” and used the absolute term “100 per cent guarantee”. This commitment not only affects how consumers select their products but also affects whether the company exaggerates its ability to sustain protection against the routing software loopholes and the risk of potential third-party use. Consumer protection litigation is a real test of whether the commercial commitment of the manufacturer can withstand the technological reality, rather than leaving the costs of over-advocacy to the family itself.

TP-Link Archer AX21官方路由器产品资料图,非安全漏洞现场。来源:TP-Link官网
TP-Link Archer AX21官方路由器产品资料图,非安全漏洞现场。来源:TP-Link官网 · 查看图片来源 ↗

A real problem: where equipment is produced

原始来源 · securityweek.comSecurityWeek:四州诉状所涉及的HomeShield安全宣传与漏洞securityweek.com ↗

TP-Link states that the equipment sold in the United States was manufactured in Viet Nam, that the Consortium moved forward with the restructuring of the business entity around 2018 and that the United States company had been removed from the control of the old Chinese parent. The State Government questions the completeness of these statements. The response to disputes can be the verification of specific machine-type customs records, suppliers ' lists, firmware development and signature release rights, remote access configurations outside the country, and not only the Made in Vietnam labels of the product's shell.

Final assembly of products in Viet Nam may still depend on cross-border R & D, cloud services and remote maintenance systems. The location labels that consumers see when purchasing do not indicate the right to upgrade software, back-office management rights and the actual flow of user information. The Four States Proceedings questioned whether there was a gap in information between commercial propaganda and these technical control relationships.

Actual impact on routers buyers

Whether the old model continues to work and whether new products can obtain FCC-type approval is a different issue. Users should continue to focus on security updates, default passwords, multiple-factor authentication, automated remote management settings and plant leak announcements, rather than abandoning all equipment in a court panic that has not yet been decided.

Where the United States state government enters a civil consumer protection case on national security grounds, it should separate the facts required for disclosure, detectable technical standards, damage and relief; When the manufacturer emphasizes independent business, it is the duty of the customer to obtain sufficient evidence to verify. Political labels are not a substitute for technical proof of true safety of home networks; But the technical company cannot substitute for external oversight by saying “Be sure of us”.

The four states have initiated consumer protection actions in each of the four states

The States in which proceedings were instituted on 6 October are Florida, Montana, Iowa, Nebraska. The State Attorney ' s Office ' s allegations based on state rules such as the Consumer Protection Act do not amount to a nationwide TP-Link router sales ban issued by the United States federal Government, or to a verbatim identical petition by the four states. The four state cases concerned the respective courts, the representation of the contested advertisement, the product model, the request for relief and the provisions of the consumer protection law; A technical dispute in one canton cannot be considered as a fact that has been established in the other three cantons.

TP-Link has clearly responded to company control and data rights

TP-Link Systems Inc., 6 October, public statement: Products sold on the United States market are produced in Viet Nam; The company is based in California and denies that it is owned or controlled by the Communist Party of China or the Chinese Government; Denying the transfer of customer network data to foreign governments or unauthorized persons. The company ' s statement is in contrast to the allegations made by the four state prosecution authorities. The focus is on the company ' s physical control chain, solid-ware signature and server upgrade, remote administrator privileges and data use by associated enterprises. These technical arrangements relate to who is to be managed by a global sales router and to whether the general user has access to complete security information. The source of the Vietnamese is not the same as the software remote control permission.

原始来源 · tp-link.comTP-Link10月6日完整声明:四州诉讼及企业反驳tp-link.com ↗

The Attorney General of the four states brought routers security disputes into the consumer protection process, forcing businesses to face a central issue: who controls the software upgrades on which equipment is based, back-office visits and the off-shore related parties. The relationship between China ' s national security system and global technology enterprises cannot be resolved by the labelling of the country of origin or by corporate propaganda. What matters most to ordinary families is not how politicians describe a brand, but whether their own Internet portals are truly subject to independent oversight and who is responsible for risks when they arise.

MEMBER DISCUSSION

Article discussion

Verified members can discuss this report publicly and manage their own content.