News for hackers. Stuff that matters.

A comment on The Insecurity of Telecom Stacks in the Wake of Salt Typhoon. Parent comment

Re:The Insecurity of Telecom Stacks in the Wake of Salt Typhoon by mschuster91 on Wednesday March 12, 2025 @05:57PM (#43348059)
Given that Cisco has RCEs and hardcoded credential CVEs at least once every half year or so, the question does arise if our current level of audits is even remotely sufficient. And it's not Cisco alone - any major vendor of VPN or firewall or general network gear suffers from the same problem.
[ Parent | on HN ]
Re:The Insecurity of Telecom Stacks in the Wake of Salt Typhoon by Veserv on Wednesday March 12, 2025 @08:00PM (#43349004)
They are not. Cisco and literally every other major commercial IT vendor has software that can only be considered a pile of trash that is grossly and criminally inadequate against commonplace threats and attacks.

But imagine how bad your software has to be to not even be good enough to qualify as a pile of trash. Do not let terrible be the friend of bad.

[ Parent | on HN ]