News for hackers. Stuff that matters.

A comment on Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways.

Re:Backdoor account discovered in more than 100k Zyxel firew... by smileypete on Saturday January 02, 2021 @02:54PM (#25615854)
Automated testing needs to be able to check that any dev/debug code doesn't exist in production.

(Only works if the dev/debug code is added in some sort of properly planned and documented way I guess.)

[ Parent | on HN ]
Re:Backdoor account discovered in more than 100k Zyxel firew... by stareatgoats on Saturday January 02, 2021 @05:16PM (#25617090)
You seem to assume that this was a mistake. What is to say that this was not deliberately planted albeit with plausible deniability?
[ Parent | on HN ]