Exactly.
It doesn't matter.
It doesn't improve security.
So why remove it?
Why do you want to decide for them?
Let them decide whether they want to continue using AiCloud or turn it off.
I feel like I’m going in circles because some people don’t agree with my answer. That’s fine. Yes keeping it off is as effective as removing it or a company patching the issues. I don’t really care if a user wreaks their router or turns it into a botnet or infects other devices. These things happen regardless of if you’re proactive about security or not. You can only mitigate against vulnerabilities because there will always be flaws not yet discovered or yet to be coded into new things. Ultimately as long as it’s not my devices it’s not my problem.
However is that really a good way to look at a problem. I’d honestly be damn thankful if someone took proactive steps to keep my devices safe if a feature is inherently flawed. Look at smb v1 it’s no longer enabled by default in most operating systems because it’s less secure than the alternatives. Sure you can reenable it and I’m not against that. But with this situation RMerlin has already commented a few things that I’m basing my opinions on.
1. Hiding AiCloud might not be possible because if it’s enabled and you update to a version with the AiCloud service hidden then you won’t effectively be able to change setting or turn it off or people will assume it’s gone. If he can hide it or toggle it on/off I’m fine with that as it was my first suggestion if you read the threads second comment.
2. A warning maybe possible, but is it going to be effective as stated by RMerlin. Again I’m not against this
3. Disabling the AiCloud Service at compile comes with some pros and cons. Yes this will prevent users from using the service unless built with the functionality enabled. Well it doesn’t inherently make it impossible to make firmware with it reenabled as RMerlin stated users don’t even read the changelog so why would they read documentation to re-enable it. So well yes removing it prevents any future problems that might resurface with AiCloud it’s the BIG choice RMerlin is asking user about unless alternatives can be proposed or users that do use the service vocally advocate for keeping AiCloud.
Despite people thinking I’m for simply tearing it out of the system if you actually read the thread and my posts that isn’t the case. I’ve read and presented alternatives to advocate for users that use AiCloud. I’m just running out of ideas. In fact I want to hear from people that use the service, but there hasn’t been much talk of users that do use it. And I can only justify it so much, since I have stated I don’t use it, and believe it will only bring further issues relying on ASUS. It’s ultimately not my problem however I’m trying to have a constructive discussion even though being on one side of the fence. So unless RMerlin wants me to keep discussions out of here and only hear from one side I don’t care to be silenced if what I say brings some relevant discussion to the conversation.
Hell I even shared this post on multiple sites to inform users of a problem, and to gain some feedback for RMerlin in the hope that people that do use the service will give him the feedback he
actually is looking for. Because those of us that don’t use it isn’t the people he wants to hear from.
Ultimately it’s not my call. It’s RMerlins, I’m just discussing why I think it should be removed based on my opinion and what options their are.
If users want to give pro examples for keeping it literally speak up. All I’ve heard is.
-I use it but I’m too lazy to change,
-It will affect my workflow if it’s gone
-It will cause people in support to ping RMerlin and post about it gone.
-Users should have the choice.
-Removing it might make it seem inferior to Asuswrt because it has less features now.
These are valid but.. out the users that have commented it’s mostly I don’t use it and I don’t care… useful. Doesn’t make me think it’s a relevant feature. Others have proposed alternatives and I’m for them if better then then keep or remove.
If he decides to keep it I won’t lose sleep worrying about it or the users. But I at least tried to address it.