full-disclosure - Cisco takes it easy

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <200310281512.54543.ken@vanwyk.org>
From: ken at vanwyk.org (Kenneth R. van Wyk)
Subject: Cisco takes it easy

On Tuesday 28 October 2003 13:09, Gary E. Miller wrote:
> > "Better Security - The PIX operating environment is a single system that
> > was designed with functionality and security mind. Because there is
> > no separation between the operating system and the firewall application,
>
> Just do a "strings" on the PIX binary and see all the open source
> software they stole for PIX....

Agreed, and regardless of where the src came from, why on earth would anyone 
think that removing the separation between the operating system and the 
firewall inherently make the firewall more secure?  A weak design or flawed 
implementation will still result in vulnerabilities.  A buffer overflow by 
any other name dumps core (or worse) just the same.

Cheers,

Ken van Wyk