full-disclosure - Re: Chinese backdoors "hidden in router firmware"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0803052229360.21538@mx1.mfn.org>
Date: Wed, 5 Mar 2008 22:32:37 -0600 (CST)
From: "J.A. Terranson" <measl@....org>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Chinese backdoors "hidden in router firmware"

On Thu, 06 Mar 2008 11:38:27 +0800, Jerome Jar said:

>> Come on, where are the evidences? Sounds pretty much like racialism.
>>
>> Usually the engineers are having a hard time on even getting the
>> routers and switches functional for mass market; there won't be any
>> time left for them to plant well hidden backdoors.
>
> But that's the proof right there - the reason *why* they have so much
> trouble getting the damned things to work is because they have to work
> around the backdoors in the device... ;)

Before we blow this off with a good laugh we should all remember the back 
doors in other network gear.  Even so-called "core equipment" (anyone 
remember the backdoor into the [Nortel] Shasta (later known as "BSN 5000")?

Assuming that any unaudited gear has a backdoor is just common sense.

-- 
Yours,
J.A. Terranson
sysadmin_at_mfn.org
0xpgp_key_mgmt_is_broken-dont_bother

What religion, please tell me, tells you as a follower of that religion
to occupy another country and kill its people? Please tell me. Does
Christianity tell its followers to do that? Judaism, for that matter?
Islam, for that matter? What prophet tells you to send 160,000 troops
to another country, kill men, women, and children? You just can't wear
your religion on your sleeve or just go to church. You should be
truthfully religious.

Mahmoud Ahmadinejad

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/