[35183] in bugtraq

home help back first fref pref prev next nref lref last post

RE: The Linksys WRT54G "security problem" doesn't exist

daemon@ATHENA.MIT.EDU (David Gillett)
Tue Jun 8 02:30:22 2004

Reply-To: <gillettdavid@fhda.edu>
From: "David Gillett" <gillettdavid@fhda.edu>
To: <bugtraq@securityfocus.com>
Date: Mon, 7 Jun 2004 09:09:42 -0700
Message-ID: <02ce01c44ca9$d9555a10$6e811299@HURON>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <200406051705.i55H595H002779@mx3.rateliff.net>

> > 5) Does he really think that Cisco/Linksys would not test 
> > such a basic basic basic aspect of this router's security?
> 
> Yes.  How many times have "basic basic basic" aspects of security gone
> untested, or flaws gone unnoticed?  How long was port 1900 open on my 
> SMC Barricade?  How many "basic basic basic" aspects of security 
> has Microsoft, various Linux distros, Sun, and even MacOS X violated?

  Cisco's purchase of LinkSys is still relatively recent.  I've found,
in the past, fundamental code flaws in products being marketed by Cisco 
up to a year after their acquisition of the originating company....\
  Just because they've put their name on the outside of the box doesn't 
mean they've fully QA'd the innards.

David Gillett



home help back first fref pref prev next nref lref last post