The OpenWrt build-poison scare reveals why router firmware supply-chain security matters for smart home and IoT users.

A flaw in OpenWrt's Attended Sysupgrade feature used to build custom, on-demand firmware images could have allowed for the distribution of malicious firmware packages. OpenWrt is a highly customizable ...