Well... I have managed to activate ssh
and remote login to mine ... but that alone does not mean one can install a 3rd party firmware.
me@myhost test % ssh root@10.0.0.3
root@10.0.0.3's password:
Last login: Sat Nov 14 14:43:22 2020 from 10.0.0.66
Terminal type is xterm-256color.
airporttc# dmesg
...
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
2006, 2007, 2008, 2009, 2010, 2011, 2012
The NetBSD Foundation, Inc. All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
NetBSD 6.0 (build.kernel-target.conf) #0: Mon Apr 29 18:35:13 PDT 2019
root@xapp29.apple.com:/BuildRoot/Library/Caches/com.apple.xbs/Sources/J28/AirPortFW-79100.2/Embedded/Firmware/NetBSD/Targets/J28/release/obj/build.kernel-target.conf
total memory = 256 MB
avail memory = 229 MB
timecounter: Timecounters tick every 10.000 msec
mainbus0 (root)
cpu0 at mainbus0 core 0: 1 GHz Cortex-A9 r4p0 (Cortex core)
...
Maybe it is time to ask Apple to fix this security hole?