5 ms·
Your point is undermined by your links. The first describes a remote network exploit, which is not developed by coöperation or coercion. Exploits take advantag
by linkregister 9y ago
Your point is undermined by your links. The first describes a remote network exploit, which is not developed by coöperation or coercion. Exploits take advantage of a software vulnerability to insert additional capabilities (espionage). I think you wanted to find a link describing the process of interdiction, which was implied to exist in the Snowden documents.
The second link is just a public denial by Check Point. I'm not sure why you're implying these companies coöperate with their governments. A discovered back door would destroy Kaspersky, Huawei, Cisco, Check Point, etc.; nobody would renew their contracts with that massive loss of trust.
I do think you raise an excellent point. The actual reality that these companies aren't providing back doors is not relevant when the perception is that they are. The greatest risk is not coöperation, but of remote exploitation of the software. It turns out that there are a few major countries known for conducting network exploitation campaigns, unrelated to the country of origin of the target software. Just as the Stuxnet guys were almost certainly not German, yet they had a vulnerability in Siemens software, and the NotPetya authors didn't exert physical influence over ME.Doc in Ukraine, attackers have little to do with where the software was built.
As long as a government acts "scary", however, it makes companies feel less secure in the software, which affects sales. I'm not singling out software and hardware procurement officers; the "feels = reals" phenomenon is a human condition.
- freehunter 9y agoThe links aren't meant to prove there is some kind of government-planted backdoor, but rather to show the same kind of evidence Kaspersky is being charged with: rumors and whispers. And it's completely fair to judge based on that because every company is judged based on that.
- linkregister 9y agoThe link talking about a remote exploit has nothing to do with back doors. Claiming it does belies a lack of expertise (which is fine) or an intent to deceive.
- jacquesm 9y ago> A discovered back door would destroy Kaspersky, Huawei, Cisco, Check Point, etc.; nobody would renew their contracts with that massive loss of trust. Given that a backdoor could look like an undiscovered exploit I fail to see how the one would result in the other, besides that where will you turn? To one of the other parties... Consider this the present situation and almost nobody has moved away from their vendors. Except maybe Juniper (not in your list) I don't see any of these brands as damaged (yet).
- linkregister 9y agoI don't think any credible vulnerability researcher would conclude any of those companies' software vulnerabilities were back doors. If you know of one, please let me know. All of these companies write software in languages that require the programmer to track memory management and bound their own copies. The probability that software written in languages like that will generate a memory corruption vulnerability is extremely high. Has Juniper actually been damaged by the backdoored source code scandal (which is the only genuinely back doored American company I can think of)? This report claims a 5% YoY net revenue increase, along with higher GAAP profit. http://investor.juniper.net/investor-relations/press-releases/press-release-details/2017/Juniper-Networks-Reports-Preliminary-Fourth-Quarter-and-Fiscal-Year-2016-Financial-Results/default.aspx http://investor.juniper.net/investor-relations/press-release...