[104531] in North American Network Operators' Group
Re: [NANOG] IOS rootkits
daemon@ATHENA.MIT.EDU (Gadi Evron)
Sat May 17 07:42:39 2008
Date: Sat, 17 May 2008 06:41:45 -0500 (CDT)
From: Gadi Evron <ge@linuxbox.org>
To: Simon Lockhart <simon@slimey.org>
In-Reply-To: <20080517073451.GI10920@virtual.bogons.net>
Cc: nanog@merit.edu
Errors-To: nanog-bounces@nanog.org
On Sat, 17 May 2008, Simon Lockhart wrote:
> On Sat May 17, 2008 at 04:47:02PM +0930, Matthew Moyle-Croft wrote:
>> Paul Wall wrote:
>>> What if some good comes from this "root kit"?
>>>
>> I'm sure it'll be good for a number of security providers to hawk their
>> wares.
>
> How long before we need to install Anti-virus / Anti-root-kit software on
> our routers?
Very astute.
Sadly, this is already being done by a few people I know. No AV vendor has
such a tool to offer you, so don't bother asking them.
The question is, can you afford not to?
The answer may be yes, you can afford for your router to be a spying
machine for the enemy/competitor, and you can afford for it to be a bot
participating in DDoS (as currently, for example, many *nix routers are
known to be). The question is who can't afford for these things to happen...
Gadi.
> Simon
> --
> Simon Lockhart | * Sun Server Colocation * ADSL * Domain Registration *
> Director | * Domain & Web Hosting * Internet Consultancy *
> Bogons Ltd | * http://www.bogons.net/ * Email: info@bogons.net *
>
> _______________________________________________
> NANOG mailing list
> NANOG@nanog.org
> http://mailman.nanog.org/mailman/listinfo/nanog
>
_______________________________________________
NANOG mailing list
NANOG@nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog