News for hackers. Stuff that matters.

A comment on Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” in User-Agent. Parent comment

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by empath75 on Thursday March 28, 2019 @08:42AM (#19511586)
The fact that this fix made it to prod tells you that something is deeply deeply broken with cisco’s processes that goes well beyond any individual’s responsibility.
[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by martin_a on Thursday March 28, 2019 @09:03AM (#19511751)
Exactly. It's not like somebody just did this like in a three people startup. There are code reviews and quality management and many more, and this lousy "fix" has passed all those stages and instances. If nobody declined this, there's a serious problem within Cisco.
[ Parent | on HN ]