Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” in User-Agent

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by gdfasfklshg4 on Thursday March 28, 2019 @04:56AM (#19510450)

In similar situations I

1. Explain that the 'hack' does not actually fix the problem. This is absolutely the engineers responsibility. In your example Alice does not say that. This has always been sufficient.

2. I make a habit of sending emails or keeping minutes confirming such meetings and the details of who said what.

[ Parent | on HN ]

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by robertcope on Thursday March 28, 2019 @08:04AM (#19511327)

This is about all you can do. But you're right. You have to explain it and document it: "It's trivial to change User-Agent, and any decent hacker would probably not be using 'curl' as their User-Agent. We can look at logs from past events to validate this assumption."

[ Parent | on HN ]