[83268] in North American Network Operators' Group
Re: Cisco crapaganda
daemon@ATHENA.MIT.EDU (James Baldwin)
Tue Aug 9 15:34:59 2005
In-Reply-To: <200508091920.j79JKo2u025138@turing-police.cc.vt.edu>
Cc: nanog@merit.edu
From: James Baldwin <jbaldwin@antinode.net>
Date: Tue, 9 Aug 2005 15:34:34 -0400
To: Valdis.Kletnieks@vt.edu
Errors-To: owner-nanog@merit.edu
On Aug 9, 2005, at 3:20 PM, Valdis.Kletnieks@vt.edu wrote:
> On Tue, 09 Aug 2005 14:31:08 EDT, James Baldwin said:
>
>
>> What techniques are you referencing? The technique Lynn demonstrated
>> has not been seen anywhere in the wild, as far as I know. He, nor
>> ISS, ever made the source code available to anyone outside of Cisco,
>> or ISS. What publication are you referring to?
>>
>
> Didn't Lynn come out and say flat out that he'd found a lot of
> information
> on a Chinese website (with the implication that the website had
> even more
> information than what he presented)?
>
No. Not at all. Lynn found information on Chinese websites indicating
people were actively working to exploit IOS, not that anyone had
actually done so.
