Re:Cisco Nexus 9000 Switches Allow SSH As Root
by microwavecamera on Tuesday May 14, 2019 @08:48PM
(#19915360)
Well Cisco wrote the code so it has to be in some way intentional but it doesn't necessarily mean it was done maliciously though. It could a private developer key used for testing accidentally got pushed out in production code or some poorly thought out management "feature". Regardless it is an epically dumb mistake for a company like Cisco to make on an enterprise product.
[ Parent
| on HN ]
Re:Cisco Nexus 9000 Switches Allow SSH As Root
by dngray on Thursday May 16, 2019 @11:39PM
(#19936043)
> Well Cisco wrote the code so it has to be in some way intentional but it doesn't necessarily mean it was done maliciously though. It could a private developer key used for testing accidentally got pushed out in production code or some poorly thought out management "feature". Regardless it is an epically dumb mistake for a company like Cisco to make on an enterprise product.
That someone might not be the company, it might be a developer.
It's entirely true that the company says it's not a backdoor, the developer says it's a mistake, but he/she was approached from an external organization.
Unless you can provide either way it's impossible to classify it as a backdoor or not.