2 ms·
I worked with telecom code. It's code that parses complicated network protocols with several generations of legacy, often written in secrecy (security by obscur
by cyberax 2y ago
I worked with telecom code. It's code that parses complicated network protocols with several generations of legacy, often written in secrecy (security by obscurity), and often in C/C++.
There's just no way it can be insecure. Right.
- surajrmal 2y agoThat's also how the majority of network appliances are handled outside of Telecom.
- cyberax 2y agoYep. And the network appliance world also tried to make that a "feature", by making things like "management VLANs" and pretending that you don't need to be secure because of it.
- ofrzeta 2y agoI don't doubt that this cruft is insecure. It's just a bit of a stretch to get to that conclusion from finding a potential buffer overflow in Freeswitch. Maybe it's not a stretch but just a conclusion by analogy but then you might just say "all software is insecure".