Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.comp.freeware > #250717

Re: Juniper faces many questions after spying code planted in software

From Desk Rabbit <me@example.com>
Newsgroups alt.comp.freeware, alt.computer.security, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Subject Re: Juniper faces many questions after spying code planted in software
Date 2015-12-21 15:37 +0000
Organization A noiseless patient Spider
Message-ID <n5967f$nb4$1@deskrabbit.motzarella.org> (permalink)
References <bbf4ee98cf6ba68ba57f3dd80553332c@hoi-polloi.org> <n590um$29q$1@dont-email.me> <n593eb$anp$3@dont-email.me> <n593u3$d20$2@dont-email.me>

Cross-posted to 5 groups.

Show all headers | View raw


On 21/12/2015 14:58, Slimer wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On 2015-12-21 9:47 AM, linuxiac wrote:
>> On Mon, 21 Dec 2015 09:07:43 -0500, Slimer wrote:
>>
>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>
>>> On 2015-12-21 3:17 AM, Anonymous wrote:
>>>> The discovery of spying code nestled deeply in Juniper's
>>>> networking equipment, the latest example of a major IT vendor
>>>> caught up in an damaging cyberattack,  raises many questions.
>>>>
>>>> Juniper said Thursday that one of its firewall operating
>>>> systems had been modified to allow secret access, posing a huge
>>>> threat to companies and organizations using the equipment.
>>>>
>>>> Security experts wondered how the modifications could have been
>>>> made years ago to some of Juniper's most sensitive source code
>>>> without it knowing until recently. Companies try to vigorously
>>>> protect their source code, which is an IT company's core
>>>> intellectual property.
>>>>
>>>> http://www.pcworld.com/article/3017395/juniper-faces-many-
>>>> questions-after-spying-code-planted-in-software.html
>>>>
>>>> Another unix based product full of security holes.  Imagine
>>>> that.
>>>
>>> I'm just wondering whether the source code of the product was
>>> open to everyone or whether it was proprietary. The article
>>> doesn't say much about it.
>>
>> It's based on FreeBSD. I believe it's proprietary but I'm not
>> positive.
>
> If anything, the article makes proprietary software rather than UNIX
> or Linux look bad. Even as a Windows user, I see the benefit of free
> software as something which would prevent such things from occurring.

Can't see how. At least commercial companies with proper certification 
will be required to audit on a regular basis (Note this was found 
"“During a recent internal code review").

There have been a number of bugs in open source that IIRC have been 
around a long time, reported and left unfixed.

Unless you are a coding expert and have hours to spend pouring over the 
source code looking for backdoors, bugs etc, having access to the source 
code is no benefit.

Bottom line, all code can be compromised.

Back to alt.comp.freeware | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Juniper faces many questions after spying code planted in software Anonymous <anonymous@hoi-polloi.org> - 2015-12-21 09:17 +0100
  Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:07 -0500
    Re: Juniper faces many questions after spying code planted in software linuxiac <linuxiac@usa.com> - 2015-12-21 14:47 +0000
      Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:58 -0500
        Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-21 15:37 +0000
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 10:45 -0500
            Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-23 10:12 +0000
              Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-23 11:19 -0500
                Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-24 11:41 +0000
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-24 14:21 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 11:54 -0700
                Re: Juniper faces many questions after spying code planted in software Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-24 13:49 -0800
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 15:24 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-24 15:32 -0700
                Re: Juniper faces many questions after spying code planted in software "Ezekiel" <zeke@nosuchemail.com> - 2015-12-24 20:00 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 06:55 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 11:08 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 13:26 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 13:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:30 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:01 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:33 -0700
                Re: Juniper faces many questions after spying code planted in software Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-28 20:45 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:53 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2015-12-30 01:35 +0000
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-29 19:03 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:15 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:33 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2016-01-03 05:18 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Wildman <best_lay@yahoo.com> - 2015-12-28 15:17 -0600
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <anonymous@foto.nl1.torservers.net> - 2015-12-28 18:05 -0500
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-29 21:00 +0000
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <nobody@remailer.paranoici.org> - 2015-12-28 23:26 +0000
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2015-12-29 00:54 +0000
                Re: Juniper faces many questions after spying code planted in software G. Morgan <graham@grahammorgan.name> - 2015-12-30 16:39 -0600
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-31 03:20 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-31 08:25 -0600
                Re: Juniper faces many questions after spying code planted in software Nomen Nescio <nobody@dizum.com> - 2016-01-01 11:47 +0100
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2016-01-01 11:38 +0000
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2016-01-01 11:11 -0500
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 14:42 -0500
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:34 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:03 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:35 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:21 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:54 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-29 18:07 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:05 -0600
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-30 13:13 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:32 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-30 13:36 -0700
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 16:35 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 16:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:38 -0700
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:00 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:36 -0700
                Re: Juniper faces many questions after spying code planted in software "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-29 03:26 +0100
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:56 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-24 10:46 -0500
        Re: Juniper faces many questions after spying code planted in software Jeremy Bentham <nobody@anemone.mooo.com> - 2015-12-21 23:38 +0100
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 19:05 -0500
          Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-22 07:04 -0600
      Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-21 09:10 -0600

csiph-web