News for hackers. Stuff that matters.

A comment on Zero-days in Cisco Discovery Protocol. Parent comment

Re:Zero-days in Cisco Discovery Protocol by all_blue_chucks on Thursday February 06, 2020 @03:25PM (#22259927)
If you designed your application correctly, you shouldn't have to trust network hardware in the first place.
[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by throwaway15392 on Thursday February 06, 2020 @03:30PM (#22259963)
Can you elaborate?
[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by all_blue_chucks on Thursday February 06, 2020 @04:55PM (#22260813)
If every network connection your system makes authenticates the client to the server, authenticates the server to the client, and encrypts the dataflows then you don't have to worry if your routers are hacked.

A typical way to do this is to use TLS, verify certificates, and have a password for the client.

[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by fulafel on Friday February 07, 2020 @01:29AM (#22263712)
It's a well known & age old principle in building networked systems.

https://en.wikipedia.org/wiki/Fallacies_of_distributed_compu...

(But of course these fallacies are so well known exactly because programmers have proven their inability to reliably internalize them...)

[ Parent | on HN ]