Re:Cisco Nexus 9000 Switches Allow SSH As Root
by SquareWheel on Tuesday May 14, 2019 @11:18PM
(#19916122)
>But any competently inserted intentional backdoor is going to be indistinguishable from a mistake.
Maybe, but without proof it's still just speculation. Real bugs do occur often, and sometimes in sensitive areas.
I understand wanting to be vigilant. In both assuming malice and assuming human error though, you're still forced to make an assumption.
Re:Cisco Nexus 9000 Switches Allow SSH As Root
by p1necone on Wednesday May 15, 2019 @12:39AM
(#19916460)
You're not forced to make an assumption, you can just be honest and say you don't know. There's too many comments in this thread effectively saying "it looks unintentional, so it's unintentional".
Re:Cisco Nexus 9000 Switches Allow SSH As Root
by SquareWheel on Wednesday May 15, 2019 @02:43AM
(#19916954)
>You're not forced to make an assumption, you can just be honest and say you don't know.
Indeed. That's what I was trying to say.
If Cisco had some SecretFBIChinaBackdoor() function somewhere the backlash would be way way worse (or at least an unknown). Whereas at this point it's abundantly clear that serious "non intentional" security vulnerabilities in networking hardware basically go ignored by the market.