[104531] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [NANOG] IOS rootkits

daemon@ATHENA.MIT.EDU (Gadi Evron)
Sat May 17 07:42:39 2008

Date: Sat, 17 May 2008 06:41:45 -0500 (CDT)
From: Gadi Evron <ge@linuxbox.org>
To: Simon Lockhart <simon@slimey.org>
In-Reply-To: <20080517073451.GI10920@virtual.bogons.net>
Cc: nanog@merit.edu
Errors-To: nanog-bounces@nanog.org

On Sat, 17 May 2008, Simon Lockhart wrote:
> On Sat May 17, 2008 at 04:47:02PM +0930, Matthew Moyle-Croft wrote:
>> Paul Wall wrote:
>>> What if some good comes from this "root kit"?
>>>
>> I'm sure it'll be good for a number of security providers to hawk their
>> wares.
>
> How long before we need to install Anti-virus / Anti-root-kit software on
> our routers?

Very astute.

Sadly, this is already being done by a few people I know. No AV vendor has 
such a tool to offer you, so don't bother asking them.

The question is, can you afford not to?

The answer may be yes, you can afford for your router to be a spying 
machine for the enemy/competitor, and you can afford for it to be a bot 
participating in DDoS (as currently, for example, many *nix routers are 
known to be). The question is who can't afford for these things to happen...

 	Gadi.


> Simon
> -- 
> Simon Lockhart | * Sun Server Colocation * ADSL * Domain Registration *
>   Director    |    * Domain & Web Hosting * Internet Consultancy *
>  Bogons Ltd   | * http://www.bogons.net/  *  Email: info@bogons.net  *
>
> _______________________________________________
> NANOG mailing list
> NANOG@nanog.org
> http://mailman.nanog.org/mailman/listinfo/nanog
>

_______________________________________________
NANOG mailing list
NANOG@nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog

home help back first fref pref prev next nref lref last post