3 ms·
I'll bet you ten dollars there are more backdoors, better hidden than the ones they found. Say, with Underhanded C style coding. An additional ten bucks says th
by kabdib 11y ago
I'll bet you ten dollars there are more backdoors, better hidden than the ones they found. Say, with Underhanded C style coding. An additional ten bucks says that Cisco and the top handful of consumer appliances also contain such backdoors.
I hope the folks at Juniper are checking their toolchains, build machines and repositories for signs of similar attack. Of course, enough time has elapsed that they may need to establish a cleanroom for their code. Hoo boy.
- jacquesm 11y ago> I hope the folks at Juniper are checking their toolchains, build machines and repositories for signs of similar attack. I hope they figure out who planted it there and that they change their hiring/code review policies to make sure that such a thing can not happen again. Firewalls should be tamper-proof to the point where they simply refuse to operate at all if the code has been messed with after it leaves the premises, the absence of such tamper proofing is already a problem and should be taken quite serious.
- kbenson 11y agoWhich is DRM, right? Which is fine, but it needs to be DRM in control of the owner, not the supplying company. There's all sorts of evils in the world to worry about, so we shouldn't be too quick to get away from one that we run into the arms of another. There are, not coincidentally, parallels with terrorism and the security state.
- kabdib 11y agoI would love an attestation system. For instance, the firewalls around a store's credit card info (even if this data isn't stored, but tokenized, it's still damned useful) should sing like a canary if their configuration or firmware are hacked. Attestation is sort of like DRM with policies that you decide. Note that many of these devices have significant complexity in hardware. Lots of things that state-level actors can do to your hardware, on the order of: - see packet starting with a known signature - over-write the rest of that packet with interesting stuff, and transmit Something at this level would be really hard to find.
- superuser2 11y agoI'll bet you there are tons more unintentional vulnerabilities than actual backdoors. The state of secure software is so poor that you only need to install an actual "backdoor" if you don't have the money to throw a couple of security researchers at it for a few weeks.
- rbc 11y agoIt makes me wonder about their control of the software design and build process. It looks like something went really wrong with their software supply chain.