[167903] in North American Network Operators' Group
Re: NSA able to compromise Cisco, Juniper, Huawei switches
daemon@ATHENA.MIT.EDU (Warren Bailey)
Tue Dec 31 14:22:29 2013
From: Warren Bailey <wbailey@satelliteintelligencegroup.com>
To: Randy Bush <randy@psg.com>, Florian Weimer <fw@deneb.enyo.de>
Date: Tue, 31 Dec 2013 19:16:18 +0000
In-Reply-To: <m27gakrg9y.wl%randy@psg.com>
Cc: Clay Kossmeyer <ckossmey@cisco.com>, North American Network Operators'
Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
+1
NSA states very clearly this is baked in and =B3widely deployed=B2. Either
Cisco is not very happy with their government overlords today, or they are
having long meetings at those oversized conference tables trying to figure
out what to tell everyone. I=B9m curious about the implications to the US
DoD STIG=B9s that are put out, as I=B9m fairly sure they do not mention the=
re
is a backdoor that anyone who knows how to knock can access.
My other question is.. How are they identifying unique ASA and PIX? Is
there a fingerprint mechanism that tells it what=B9s going on? I=B9d think
there would be quite a few admins out there with really weird syslog
entries??
Randy is right here.. Cisco has some =8Csplainin to do - we buy these
devices as =B3security appliances=B2, not NSA rootkit gateways. I hope the =
.cn
guys don=B9t figure out what=B9s going on here, I=B9d imagine there are ple=
nty
of ASA=B9s in the .gov infrastructures.
//warren
PS - I mentioned .cn specifically because of the Huawei aspect, in
addition to the fact that it has been widely publicized we are in a =B3cybe=
r
war=B2 with them.=20
On 12/31/13, 12:07 PM, "Randy Bush" <randy@psg.com> wrote:
>> There's a limit to what can reasonably be called a *product*
>> vulnerability.
>
>right. if the product was wearing a low-cut blouse and a short skirt,
>it's not.
>
>it's weasel words (excuse the idiom). shoveling kitty litter over a big
>steaming pile.
>
>let me insert a second advert for jake's 30c3 preso,
>https://www.youtube.com/watch?v=3Db0w36GAyZIA
>
>randy
>
