FCC updates covered list to include foreign-made consumer routers (fcc.gov)

Article summary

The FCC has updated its covered list to include foreign-made consumer routers, citing national security concerns. The move is seen as a response to the increasing number of cyber attacks leveraging vulnerabilities in small and home office routers produced abroad. The restrictions apply to new device models, and do not impact the continued use of previously acquired routers. The decision's impact on the industry and consumer behavior is being discussed.

Main themes

• National Security
• Cyber Attacks
• Router Manufacturing
• Supply Chain Vulnerabilities
• US Trade Policy
• Global Manufacturing Trends
• Security Practices and Accountability

What commenters say

• The decision is motivated by concerns over national security and the potential for foreign-made routers to be used as a vector for cyber attacks.
• Vulnerabilities in routers are often due to manufacturers' poor security practices, rather than the country of manufacture.
• The US has limited capability to produce consumer-grade routers domestically, with most manufacturing taking place abroad.
• Assembling routers in the US from internationally sourced components could be a first step towards reshoring manufacturing.
• The decision may not be effective in improving security, as vulnerabilities can be introduced at various points in the supply chain.
• Some argue that the decision is overly broad and may not distinguish between trustworthy and untrustworthy foreign manufacturers.
• Others believe that the decision is necessary to protect against the potential for foreign nation-states to pressure manufacturers into including backdoors or other security risks.
• The effectiveness of the decision in addressing security concerns is uncertain and may depend on various factors, including the ability to hold manufacturers accountable for security practices.