3 ms·

Wow, this was a real eye-opener. >Thanks to the hardworking Russians and their exploit kits... many businesses already have compromised machines in their netwo

Wow, this was a real eye-opener. >Thanks to the hardworking Russians and their exploit kits... many businesses already have compromised machines in their network. Almost all of the Fortune 500, with their enormous networks, have a few bots on the inside I could definitely believe that, having worked at a few, they have massive infrastructure and many users that are extremely relaxed about security in general. What then struck me was the way he casually decided to hack a VPN (!) is it really so straightforward? And the way he seemed confident about testing his exploit on other compromised machines without detection. I'm always paranoid every time I type 'last' on my Linux box, wondering if the thing is really compromised and totally lying to me - now I'm even more so!

klapinat0r 11y ago
> What then struck me was the way he casually decided to hack a VPN He's intentionally vague, but given he mentions two routers and two vpn systems, it's highly probable that he's referring to one of the two routers (which is embedded, and has firmware). Furthermore, he refers to a website[1] which predominately deals with routers. > is it really so straightforward? Routers, yes[2], VPN daemons, not as much. [1]: http://www.devttys0.com/training/ http://www.devttys0.com/training/ - which can also contain a vpn daemon of course. [2]: https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2 https://github.com/darkarnium/secpub/tree/master/Multivendor...