3 ms·
Another one bites the dust. I'm ready for more though, because it is vindicating my position on FOSS. While FOSS isn't a panacea, at least you can read the code
by arca_vorago 11y ago
Another one bites the dust. I'm ready for more though, because it is vindicating my position on FOSS. While FOSS isn't a panacea, at least you can read the code!
- 0x0 11y agoLike heartbleed, gotofail, or the debian ssl entropy bug? :)
- daveloyall 11y agoNot at all. Those were bugs. This is/was a feature. For this, there'd have to be a specific function in some Fortinet products for handling the special challenge/response backdoor. A magic string like `"FGTAbc11*xy+Qqz27"` in firewall source code is going to jump out at you. Unlike an extra goto...
- 0x0 11y agoHow do you know those were bugs and not features? ;)
- deleted 11y ago[deleted]
- jodrellblank 11y agoYou can. Do you? When's the last time you read the IPTables code? OpenSSH? The console login prompt? The Grub2 bootloader login prompt? NSSwitch? Krb5? Do you mean "hopefully someone else will"? Because that's what I mean.