3 ms·
Who wants to guess requested this backdoor be added? A source code revision history audit revealed that this authentication bypass mechanism was added in 2004
by a2tech 9y ago
Who wants to guess requested this backdoor be added?
A source code revision history audit revealed that this authentication bypass mechanism was added in 2004 when ENOS was owned by Nortel’s Blade Server Switch Business Unit (BSSBU). The mechanism was authorized by Nortel and added at the request of a BSSBU OEM customer. Nortel spun BSSBU off in 2006 to form BLADE Network Technologies (BNT). BNT was purchased by IBM in 2010, and, subsequently, Lenovo in 2014.
- thg 9y ago> Who wants to guess requested this backdoor be added? It could actually have been added by malicious hackers.. Wikipedia entry[0] reads like Nortel didn't really care about having had their systems completely breached for a decade, nor did they disclose that to any (prospective) buyers of the company. [0]: https://en.wikipedia.org/wiki/Nortel#Hackers_had_free_access_for_years_without_being_detected https://en.wikipedia.org/wiki/Nortel#Hackers_had_free_access...
- tensor 9y ago>In a security advisory regarding this issue, Lenovo refers to the backdoor under the name of "HP backdoor." Could they be implying it was HP?