The set I got recent has the code injection exploit patched. Does it mean that I could no longer enable dropbear (for SSH) on the FON? No!

Happily took out my serial cable and attached to the FON to access the console. From there did the normal steps of editing firewall.user and thinclient to prevent FON from retrieving new firmware updates and configuration files. The minimum sharing is 512kb in FON website. Certainly I don’t wish to share out 512kb when it is more than my upload bandwidth and a third of my download bandwidth!

The solution? Toy with the QoS configurations on FON. Yes, FON (running on openwrt) have QoS scripts installed.

Now my current /etc/config/qos reads

config interface hotspot
option classgroup “Default”
option enabled 0
option upload 128
option download 384
option device tun0

Rebooted the device and the new QoS settings kicked in. My downloads (on public WiFi) hovers around 48kB/s instead of 64kB/s.