3 ms·
I'm probably picking nits, but is something intentionally designed and implemented a "flaw" if it works as intended?
by fallous 7y ago
I'm probably picking nits, but is something intentionally designed and implemented a "flaw" if it works as intended?
- yumraj 7y agoYou're right, depends on the perspective. From Huawei/CCP standpoint it's a feature. For everyone else, it's a flaw.
- fallous 7y agoIndeed, and given that this was an intentional design tells you who they truly believe is their primary "customer."
- yorwba 7y agoIf the intention was to allow telnet login over the internet, they'd also have added hole punching so accessing the port doesn't require bypassing the firewall. The design is more consistent with a debug feature intended for troubleshooting by someone on the same LAN. Of course the debug interface shouldn't be so easy to access, but that's just stupidity, not malice.
- keanzu 7y agoFlawed by design! "Apparently, all these years HiSilicon was unwilling or incapable to provide adequate security fixes for [the] same backdoor which, by the way, was implemented intentionally," Yarmak remarked.