bugtraq - RE: The Linksys WRT54G "security problem" doesn't exist

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 7 Jun 2004 09:09:42 -0700
From: "David Gillett" <gillettdavid@...a.edu>
To: <bugtraq@...urityfocus.com>
Subject: RE: The Linksys WRT54G "security problem" doesn't exist

> > 5) Does he really think that Cisco/Linksys would not test 
> > such a basic basic basic aspect of this router's security?
> 
> Yes.  How many times have "basic basic basic" aspects of security gone
> untested, or flaws gone unnoticed?  How long was port 1900 open on my 
> SMC Barricade?  How many "basic basic basic" aspects of security 
> has Microsoft, various Linux distros, Sun, and even MacOS X violated?

  Cisco's purchase of LinkSys is still relatively recent.  I've found,
in the past, fundamental code flaws in products being marketed by Cisco 
up to a year after their acquisition of the originating company....\
  Just because they've put their name on the outside of the box doesn't 
mean they've fully QA'd the innards.

David Gillett