News for hackers. Stuff that matters.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by RL_Quine on Tuesday May 14, 2019 @07:23PM (#19914832)
You’re joking right?

It’s “allow ssh as root with a publicly available ssh key”. Your version is making it sound mundane.

Re:Cisco Nexus 9000 Switches Allow SSH As Root by tedunangst on Tuesday May 14, 2019 @07:57PM (#19915051)
Sad state of affairs when terrible, ugly vulnerabilities are mundane.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by fungi on Tuesday May 14, 2019 @07:30PM (#19914877)
If it was a genuine "backdoor" why would you want use a publicly available key?
Re:Cisco Nexus 9000 Switches Allow SSH As Root by MaulingMonkey on Tuesday May 14, 2019 @08:10PM (#19915136)
Being the only keyholder reduces plausable deniability, so maybe.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by RL_Quine on Tuesday May 14, 2019 @08:40PM (#19915317)
The private key is on the shipped devices, from my reading.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by MaulingMonkey on Tuesday May 14, 2019 @09:11PM (#19915481)
Agreed.

I'm hypothesizing that you might do this, even with keys intended to be used as a back door, by shipping it on devices, you vastly increase the number of potential suspects for any backdoor abuse.

Continuing this train of thought - a hardcoded password is classic example of a backdoor, and just as "public" as including a private key.

Re:Cisco Nexus 9000 Switches Allow SSH As Root by anxman on Tuesday May 14, 2019 @07:41PM (#19914949)
This isn't a backdoor but it is a major vulnerability.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by tptacek on Tuesday May 14, 2019 @07:30PM (#19914875)
If mundanity is your concern, add an exclamation point to it.
Re:Cisco Nexus 9000 Switches Allow SSH As Root by RL_Quine on Tuesday May 14, 2019 @07:52PM (#19915014)
Accuracy helps.