Re: Juniper faces many questions after spying code planted in software

From	Slimer <.m@nsn.s>
Newsgroups	alt.comp.freeware, alt.computer.security, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Subject	Re: Juniper faces many questions after spying code planted in software
Date	2015-12-21 10:45 -0500
Organization	A noiseless patient Spider
Message-ID	<n596l6$om4$2@dont-email.me> (permalink)
References	<bbf4ee98cf6ba68ba57f3dd80553332c@hoi-polloi.org> <n590um$29q$1@dont-email.me> <n593eb$anp$3@dont-email.me> <n593u3$d20$2@dont-email.me> <n5967f$nb4$1@deskrabbit.motzarella.org>

Cross-posted to 5 groups.

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 2015-12-21 10:37 AM, Desk Rabbit wrote:
> On 21/12/2015 14:58, Slimer wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>> 
>> On 2015-12-21 9:47 AM, linuxiac wrote:
>>> On Mon, 21 Dec 2015 09:07:43 -0500, Slimer wrote:
>>> 
>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>> 
>>>> On 2015-12-21 3:17 AM, Anonymous wrote:
>>>>> The discovery of spying code nestled deeply in Juniper's 
>>>>> networking equipment, the latest example of a major IT
>>>>> vendor caught up in an damaging cyberattack,  raises many
>>>>> questions.
>>>>> 
>>>>> Juniper said Thursday that one of its firewall operating 
>>>>> systems had been modified to allow secret access, posing a
>>>>> huge threat to companies and organizations using the
>>>>> equipment.
>>>>> 
>>>>> Security experts wondered how the modifications could have
>>>>> been made years ago to some of Juniper's most sensitive
>>>>> source code without it knowing until recently. Companies
>>>>> try to vigorously protect their source code, which is an IT
>>>>> company's core intellectual property.
>>>>> 
>>>>> http://www.pcworld.com/article/3017395/juniper-faces-many- 
>>>>> questions-after-spying-code-planted-in-software.html
>>>>> 
>>>>> Another unix based product full of security holes.
>>>>> Imagine that.
>>>> 
>>>> I'm just wondering whether the source code of the product
>>>> was open to everyone or whether it was proprietary. The
>>>> article doesn't say much about it.
>>> 
>>> It's based on FreeBSD. I believe it's proprietary but I'm not 
>>> positive.
>> 
>> If anything, the article makes proprietary software rather than
>> UNIX or Linux look bad. Even as a Windows user, I see the benefit
>> of free software as something which would prevent such things
>> from occurring.
> 
> Can't see how. At least commercial companies with proper
> certification will be required to audit on a regular basis (Note
> this was found "“During a recent internal code review").
> 
> There have been a number of bugs in open source that IIRC have
> been around a long time, reported and left unfixed.
> 
> Unless you are a coding expert and have hours to spend pouring over
> the source code looking for backdoors, bugs etc, having access to
> the source code is no benefit.
> 
> Bottom line, all code can be compromised.

Agreed. The difference is that if you DO find a problem with free
software of any kind, you can fix it yourself rather than wait for
some developer to do it. Still, most people would wait.

- -- 
Slimer
EFF & OpenMedia member / IFAW, Mozilla & PETA supporter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWeB6AAAoJEIwFfgf/rr+u5/0H/012lGUzy7fvn+67Le4GjKsW
pDj30Q6h4IKh28XxWNE+Jl2Sv9gTmoWw0jVlIUYaqUWxrxMyoaqleHNHRyC1Nj5m
i5kEzhOjZ6R/UgwviRsh1kqvdNTJWsWlayabjd1la/uFPnwDBtgValw+M2gdWFRT
Wcx0vtejhjzpnVaTbkSidVLToEXsfWMp2/HIaUJaJmISPizWX9mrozx8mSUcewJH
0BVUru94OKV1KILqUUtVeIyVPTXirFfu63jpCB9jXmSXvV30z7ugS41KVeHQZu1z
jdKhd49tuMZF9ZQyBo7gfEro7CUtVdvw5xx6HhEtAtq78/+3pS7ddDeoBS6pvXo=
=dz7c
-----END PGP SIGNATURE-----

Thread

Juniper faces many questions after spying code planted in software Anonymous <anonymous@hoi-polloi.org> - 2015-12-21 09:17 +0100
  Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:07 -0500
    Re: Juniper faces many questions after spying code planted in software linuxiac <linuxiac@usa.com> - 2015-12-21 14:47 +0000
      Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:58 -0500
        Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-21 15:37 +0000
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 10:45 -0500
            Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-23 10:12 +0000
              Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-23 11:19 -0500
                Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-24 11:41 +0000
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-24 14:21 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 11:54 -0700
                Re: Juniper faces many questions after spying code planted in software Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-24 13:49 -0800
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 15:24 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-24 15:32 -0700
                Re: Juniper faces many questions after spying code planted in software "Ezekiel" <zeke@nosuchemail.com> - 2015-12-24 20:00 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 06:55 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 11:08 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 13:26 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 13:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:30 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:01 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:33 -0700
                Re: Juniper faces many questions after spying code planted in software Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-28 20:45 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:53 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2015-12-30 01:35 +0000
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-29 19:03 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:15 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:33 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2016-01-03 05:18 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Wildman <best_lay@yahoo.com> - 2015-12-28 15:17 -0600
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <anonymous@foto.nl1.torservers.net> - 2015-12-28 18:05 -0500
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-29 21:00 +0000
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <nobody@remailer.paranoici.org> - 2015-12-28 23:26 +0000
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2015-12-29 00:54 +0000
                Re: Juniper faces many questions after spying code planted in software G. Morgan <graham@grahammorgan.name> - 2015-12-30 16:39 -0600
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-31 03:20 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-31 08:25 -0600
                Re: Juniper faces many questions after spying code planted in software Nomen Nescio <nobody@dizum.com> - 2016-01-01 11:47 +0100
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2016-01-01 11:38 +0000
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2016-01-01 11:11 -0500
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 14:42 -0500
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:34 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:03 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:35 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:21 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:54 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-29 18:07 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:05 -0600
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-30 13:13 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:32 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-30 13:36 -0700
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 16:35 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 16:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:38 -0700
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:00 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:36 -0700
                Re: Juniper faces many questions after spying code planted in software "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-29 03:26 +0100
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:56 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-24 10:46 -0500
        Re: Juniper faces many questions after spying code planted in software Jeremy Bentham <nobody@anemone.mooo.com> - 2015-12-21 23:38 +0100
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 19:05 -0500
          Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-22 07:04 -0600
      Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-21 09:10 -0600

csiph-web