full-disclosure - Re: Chinese backdoors "hidden in router firmware"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <debd9f860803051828r743b73cdr7035712a2f95c744@mail.gmail.com>
Date: Thu, 6 Mar 2008 13:28:48 +1100
From: "quispiam lepidus" <quispiam.lepidus@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Chinese backdoors "hidden in router firmware"

Why stop at routers & switches? You could own far more devices by
backdooring BIOS', HDD's, etc, all of which are often produced in "Far East
countries".


On Thu, Mar 6, 2008 at 12:47 PM, Times Enemy <times@....org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greets.
>
> It does not matter so much if there is no hard proof about the router
> firmware containing backdoors set in place by Chinese manufacturers.
> ~From a security perspective, it is a potential threat which should be
> addressed, especially for western networks and those they trust.
>
> It is not too far fetched of an idea.  Google yielded the following
> fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml
>
> If you want to be inundated with reading material on the matter, be
> creative, or not too creative, with Google searches having to do with
> China and western powers and businesses, specific to information warfare.
>
> .te
>
>
> Larry Seltzer wrote:
> |>> Next we'll be seeing "Japanese tactical nukes "Hidden in Toyota
> | trunks"
> |
> | And who knows what the French are putting in that cheese.
> | Larry Seltzer
> | eWEEK.com Security Center Editor
> | http://security.eweek.com/ <http://security.eweek.com/>
> | <http://blogs.pcmag.com/securitywatch/>
> | http://blogs.pcmag.com/securitywatch/
> | <http://blogs.pcmag.com/securitywatch/Contributing>
> | Contributing Editor, PC Magazine
> | larry.seltzer@...fdavisenterprise.com
> |
> |
> |
> |
> | ------------------------------------------------------------------------
> |
> | _______________________________________________
> | Full-Disclosure - We believe in it.
> | Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> | Hosted and sponsored by Secunia - http://secunia.com/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkfPTUAACgkQVuM8PD1UnspxGwCfWA2YAcAk31lPkOeFUkOZm4ko
> a64AniF5C+KgjpfrAuxEkkW45BM+xpGZ
> =RwKm
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/