[167873] in North American Network Operators' Group
RE : Re: NSA able to compromise Cisco, Juniper, Huawei switches
daemon@ATHENA.MIT.EDU (Michael Hallgren)
Tue Dec 31 08:31:06 2013
Date: Tue, 31 Dec 2013 14:29:53 +0100
From: Michael Hallgren <m.hallgren@free.fr>
To: Ray Soucy <rps@maine.edu>, Blair Trosper <blair.trosper@gmail.com>
Cc: "nanog@nanog.org list" <nanog@nanog.org>
Reply-To: Michael Hallgren <m.hallgren@free.fr>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org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