[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researcher-reverse-engineers-mikrotiks-unexplained-routeros-patch":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},6099,"researcher-reverse-engineers-mikrotiks-unexplained-routeros-patch","Researcher reverse engineers MikroTik's unexplained RouterOS patch","A researcher quietly reverse engineered MikroTik's RouterOS 7.23.4 update after the company shipped a fix without explaining what it addressed.","MikroTik pushed a fix in RouterOS 7.23.4 and never said what it was for, so a researcher took the binary apart instead of waiting for an explanation.\n\nThe researcher behind [npratley.net](https:\u002F\u002Fnpratley.net\u002Freversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain\u002F) noticed that MikroTik's release notes for RouterOS 7.23.4 gave no real detail about what had changed under the hood. Rather than take the vendor's silence at face value, they diffed the update against the prior release and reverse engineered the binary to work out what had actually been patched. The write-up documents that process step by step, filling in the gap MikroTik's own changelog left blank. It is unpaid audit work that MikroTik, as the vendor, chose not to do itself.\n\nRouterOS runs on a huge base of routers used by ISPs, small businesses, and hobbyists who rely on that changelog to judge how urgently to update. When a vendor patches quietly, admins have no way to tell whether they are looking at a cosmetic bug fix or something worth an emergency maintenance window. Independent reverse-engineering like this is often the only way that distinction becomes public at all.\n\nMikroTik is far from the only vendor to ship fixes without receipts, but a company with this much internet-facing hardware in the field has less room than most to keep its patch notes vague.","[\"mikrotik\",\"routeros\",\"security\",\"reverse-engineering\"]","2026-09-05T00:03:08.000Z","2026-09-05T02:49:54.316Z","2026-09-05T02:50:06.190Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Add the researcher's name and a link to the original write-up (npratley.net) so the reverse-engineering claim is attributable and verifiable, rather than referring to them only as 'a researcher.'","resolved","security",[32,33,30,34],"mikrotik","routeros","reverse-engineering",[36],{"name":37,"url":38},"Hacker News","https:\u002F\u002Fnpratley.net\u002Freversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain\u002F",0,{"sections":41},[42,47,50,55,60,65,70,75,80,85,90,95,100,105],{"name":43,"slug":44,"count":45,"latest_published_at":46},"AI","ai",3385,"2026-09-04T22:17:36.000Z",{"name":48,"slug":30,"count":49,"latest_published_at":18},"Security",565,{"name":51,"slug":52,"count":53,"latest_published_at":54},"Policy","policy",300,"2026-09-04T22:18:34.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Hardware","hardware",152,"2026-09-03T09:26:48.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Consumer Tech","consumer-tech",97,"2026-09-04T15:29:18.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Science","science",96,"2026-09-03T22:30:00.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Startups","startups",54,"2026-09-04T23:36:14.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"General","general",37,"2026-09-04T20:22:41.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]