2 ms·
None of your examples have pretty much had hardcoded-password vulnerabilities once-a-year for the past 20 years. (yes, a slight exaggeration but you get the ide
by petee 9y ago
None of your examples have pretty much had hardcoded-password vulnerabilities once-a-year for the past 20 years. (yes, a slight exaggeration but you get the idea)
And only one of these, Cisco is a security/infrastructure company. So to consistently miss low hanging fruit, and violate best-common-practices...yeah, their trust level should be taking a hit.
- peterwwillis 9y agoWhereas Linux probably has had privesc holes once a year for 20 years, Cisco definitely has not. Their core products have been rock solid for decades. Only their newer, non-IOS stuff has had persistent problems lately, with a few of IOS holes.
- petee 9y agoActually they have - IOS has had almost 1 a year the last 20 years...compare Code Execution CVEs to the Linux Kernel, and they are damn close if you exclude the kernel's huge number for 2017 - Kernel only has 20 more than IOS. And the kernel is likely far larger than IOS Edit: apparently this isn't the only 'product' page for IOS, there are multiple, and also different versions which get their own CVEs: https://www.cvedetails.com/product/19/Cisco-IOS.html?vendor_id=16 https://www.cvedetails.com/product/19/Cisco-IOS.html?vendor_... https://www.cvedetails.com/product/47/Linux-Linux-Kernel.html https://www.cvedetails.com/product/47/Linux-Linux-Kernel.htm...