4 ms·
Most backdoors in commercial software are due to stupidity, not ill intent: software engineers putting a debug access point "I will remove it later before it go
by ptero 8y ago
Most backdoors in commercial software are due to stupidity, not ill intent: software engineers putting a debug access point "I will remove it later before it goes into production" or business side having weird ideas "it would be so much simpler if we could log in and fix/reconfigure it for consumers".
Finding those only to replace them with a more elaborate bug seems to be ill intent and unlikely for me. The bigger problem IMO is that the mentality above is still prevalent: for every two backdoors found a new one may be put in by another do-gooder.
- _jal 8y agoCisco is the Oracle of the networking world. I'm sure it is mostly incompetence, with only the occasional state-actor poisoning the well. But I see little evidence Cisco gives a damn or has any intention of actually attempting to regain some of the squandered trust. Which is fine, from my perspective; for the most part I like other vendors' kit quite a bit more anyway. I do think product liability law needs to kick in somewhere. If you have some Tourettes-like inability to stop writing back doors in security products, there should be some outside pressure to maybe get some help.
- giancarlostoro 8y agoIs Cisco as evil as Oracle? Because ouch. Oracle is just plain evil. I have no reason to compare Cisco to Oracle yet. I usually prefer TP Link since they're usually effective and affordable to boot.