4 ms·

> ...it does make clear that, like the unidentified parties behind those hacks, the agencies found ways to penetrate the “NetScreen” line of security products..

> ...it does make clear that, like the unidentified parties behind those hacks, the agencies found ways to penetrate the “NetScreen” line of security products... It does? Sounds like this is a rather normal, expected, analysis. They're just reviewing products; probably they already had similar capabilities on IOS and wanted to make sure they could handle other targets or a shift in the market. This does not sound like getting backdoors placed, at all. I hate to be suspicious or cynical here, but is this just The Intercept being opportunistic? Is there any reason to relate this to the recent "unauthorized code" issues?

revelation 11y ago
Presumably you should direct your anger at the parties responsible for the occlusion and uncertainty here. If that fails, let's hate on Juniper. In any case, the linked PDF says that they do indeed have current exploitation capabilities for Juniper products and are working on more, even if it initially reads like a product brochure.
- MichaelGG 11y ago
  Current as of that time. Juniper's released a lot of security advisories since them. Though it's likely that they continue to find exploits. I'd be surprised if they don't have similar reports for any popular product, hardware or software, closed or open source.
strictnein 11y ago
I think they're trying hard to connect dots that aren't really connected. Glenn gets a little overzealous at times, in my opinion.
BinaryIdiot 11y ago
You are completely correct. There isn't any correlation indicating that a security agency was behind the backdoors setup in their OS. Granted this could still be the case but there isn't any evidence, known to the public at least, that any security agency had a hand in creating the backdoors. The timing of this article is obviously done in order to capitalize on the recent Juniper news. I would suspect all security agencies to be looking at the security of al networking products that they can get a hand on.
- atmosx 11y ago
  > There isn't any correlation indicating that a security agency was behind the backdoors setup in their OS. I am not so sure. There are strong indications pointing[1] at state actors. [1] http://securityaffairs.co/wordpress/42971/hacking/juniper-screenos-authentication-backdoor.html http://securityaffairs.co/wordpress/42971/hacking/juniper-sc...
deleted 11y ago
[deleted]
sbov 11y ago
As to what you're quoting, yes, it does. It seems likely that they found ways to penetrate NetScreen. At the end of the original top secret document: > The vast majority of current Juniper exploits are against firewalls running the ScreenOS operating system. This reads like a statement of fact. That they knew of multiple exploits against ScreenOS. Enough to use the term "vast majority". That doesn't mean the most recent backdoors are their work, but it does seem to imply that they found ways to penetrate NetScreen.

revelation 11y ago

Presumably you should direct your anger at the parties responsible for the occlusion and uncertainty here. If that fails, let's hate on Juniper. In any case, the linked PDF says that they do indeed have current exploitation capabilities for Juniper products and are working on more, even if it initially reads like a product brochure.

MichaelGG 11y ago
Current as of that time. Juniper's released a lot of security advisories since them. Though it's likely that they continue to find exploits. I'd be surprised if they don't have similar reports for any popular product, hardware or software, closed or open source.

strictnein 11y ago

I think they're trying hard to connect dots that aren't really connected. Glenn gets a little overzealous at times, in my opinion.

BinaryIdiot 11y ago

You are completely correct. There isn't any correlation indicating that a security agency was behind the backdoors setup in their OS. Granted this could still be the case but there isn't any evidence, known to the public at least, that any security agency had a hand in creating the backdoors. The timing of this article is obviously done in order to capitalize on the recent Juniper news. I would suspect all security agencies to be looking at the security of al networking products that they can get a hand on.

atmosx 11y ago
> There isn't any correlation indicating that a security agency was behind the backdoors setup in their OS. I am not so sure. There are strong indications pointing[1] at state actors. [1] http://securityaffairs.co/wordpress/42971/hacking/juniper-screenos-authentication-backdoor.html http://securityaffairs.co/wordpress/42971/hacking/juniper-sc...

deleted 11y ago

[deleted]

sbov 11y ago

As to what you're quoting, yes, it does. It seems likely that they found ways to penetrate NetScreen. At the end of the original top secret document: > The vast majority of current Juniper exploits are against firewalls running the ScreenOS operating system. This reads like a statement of fact. That they knew of multiple exploits against ScreenOS. Enough to use the term "vast majority". That doesn't mean the most recent backdoors are their work, but it does seem to imply that they found ways to penetrate NetScreen.