5 ms·
The huawei user account hardcoded in the firmware that has sudoers permissions for insmod/modprobe is really blatant. I would have guessed the Chinese would at
by ru999gol 7y ago
The huawei user account hardcoded in the firmware that has sudoers permissions for insmod/modprobe is really blatant. I would have guessed the Chinese would at least attempt to hide their way in?
So they sell enterprise infrastructure equipment with such an obvious backdoor? It seems the US boycott of Huawei was fully justified after all, I didn't really believe them.
- bennofs 7y agoThat doesn't have to be a backdoor. Remember the wave of bugs caused by hardcoded secrets in Cisco hardware? Might just be some leftover debugging account or for service.
- ABCLAW 7y ago>That doesn't have to be a backdoor. It is a backdoor. The definition of the term doesn't require intent.
- chasil 7y agoIt would be both more subtle and practical had Huawei modified sshd to accept any key that had been signed by their CA. That would have been slightly harder to detect.
- pertymcpert 7y agoHow could that be harder to detect?