News for hackers. Stuff that matters.

A comment on Cisco Nexus 9000 Switches Allow SSH As Root. Parent comment

Re:Cisco Nexus 9000 Switches Allow SSH As Root by matthewaveryusa on Tuesday May 14, 2019 @08:18PM (#19915182)
And plausible deniability is the #1 rule when being malicious. If you know enough to use an asymmetric key instead of a password, but not enough to think it's a good idea to leave the private key there, you're in a weird cross-section of expertise.
[ Parent | on HN ]
Re:Cisco Nexus 9000 Switches Allow SSH As Root by snazz on Tuesday May 14, 2019 @08:47PM (#19915350)
A broken script that turns a development build into a production/customer build could also be at fault, forgetting to delete the default key pair.
[ Parent | on HN ]
Re:Cisco Nexus 9000 Switches Allow SSH As Root by matthewaveryusa on Wednesday May 15, 2019 @08:09AM (#19918579)
Equally as plausible which is exactly where you want to be if you're malicious.

I'll spin this around though: What would a high-quality plausibly deniable backdoor look like to you?

[ Parent | on HN ]