Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.comp.freeware > #250949
| From | Desk Rabbit <me@example.com> |
|---|---|
| Newsgroups | alt.comp.freeware, alt.computer.security, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy |
| Subject | Re: Juniper faces many questions after spying code planted in software |
| Date | 2015-12-24 11:41 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <n5glfl$din$1@deskrabbit.motzarella.org> (permalink) |
| References | (3 earlier) <n593u3$d20$2@dont-email.me> <n5967f$nb4$1@deskrabbit.motzarella.org> <n596l6$om4$2@dont-email.me> <n5drtg$al4$1@deskrabbit.motzarella.org> <n5ehe4$lsd$1@dont-email.me> |
Cross-posted to 5 groups.
On 23/12/2015 16:19, Slimer wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 2015-12-23 5:12 AM, Desk Rabbit wrote: >> On 21/12/2015 15:45, Slimer wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >>> >>> On 2015-12-21 10:37 AM, Desk Rabbit wrote: >>>> On 21/12/2015 14:58, Slimer wrote: >>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >>>>> >>>>> On 2015-12-21 9:47 AM, linuxiac wrote: >>>>>> On Mon, 21 Dec 2015 09:07:43 -0500, Slimer wrote: >>>>>> >>>>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >>>>>>> >>>>>>> On 2015-12-21 3:17 AM, Anonymous wrote: >>>>>>>> The discovery of spying code nestled deeply in >>>>>>>> Juniper's networking equipment, the latest example of a >>>>>>>> major IT vendor caught up in an damaging cyberattack, >>>>>>>> raises many questions. >>>>>>>> >>>>>>>> Juniper said Thursday that one of its firewall >>>>>>>> operating systems had been modified to allow secret >>>>>>>> access, posing a huge threat to companies and >>>>>>>> organizations using the equipment. >>>>>>>> >>>>>>>> Security experts wondered how the modifications could >>>>>>>> have been made years ago to some of Juniper's most >>>>>>>> sensitive source code without it knowing until >>>>>>>> recently. Companies try to vigorously protect their >>>>>>>> source code, which is an IT company's core intellectual >>>>>>>> property. >>>>>>>> >>>>>>>> http://www.pcworld.com/article/3017395/juniper-faces-many- >>>>>>>> >>>>>>>> > questions-after-spying-code-planted-in-software.html >>>>>>>> >>>>>>>> Another unix based product full of security holes. >>>>>>>> Imagine that. >>>>>>> >>>>>>> I'm just wondering whether the source code of the >>>>>>> product was open to everyone or whether it was >>>>>>> proprietary. The article doesn't say much about it. >>>>>> >>>>>> It's based on FreeBSD. I believe it's proprietary but I'm >>>>>> not positive. >>>>> >>>>> If anything, the article makes proprietary software rather >>>>> than UNIX or Linux look bad. Even as a Windows user, I see >>>>> the benefit of free software as something which would prevent >>>>> such things from occurring. >>>> >>>> Can't see how. At least commercial companies with proper >>>> certification will be required to audit on a regular basis >>>> (Note this was found "“During a recent internal code review"). >>>> >>>> There have been a number of bugs in open source that IIRC have >>>> been around a long time, reported and left unfixed. >>>> >>>> Unless you are a coding expert and have hours to spend pouring >>>> over the source code looking for backdoors, bugs etc, having >>>> access to the source code is no benefit. >>>> >>>> Bottom line, all code can be compromised. >>> >>> Agreed. The difference is that if you DO find a problem with >>> free software of any kind, you can fix it yourself rather than >>> wait for some developer to do it. Still, most people would wait. >> >> Most cars have service manuals (Haynes) but very few people have >> the skill, tools and time to repair them, the same is true of Open >> Source software. Besides which, unless you get your code back into >> the repo and approved, you'll be running a different version. Also >> fixing a single bug in isolation could cause more problems if you >> don't understand how the whole lot works so you could introduce a >> new set of problems. >> >> It's a nice idea but few small businesses (Who make up the majority >> of businesses here in the UK) don't have the skills in house to >> fix software so they'd have to hire someone. This makes Open Source >> more expensive in the long run. > > You might be right. I guess that in the end, free software ends up > being the cheaper choice only if you either produce it from scratch > and have people in house customize all of the code for you to create a > separate, almost proprietary version strictly for your company's use > or if you buy something like Redhat and get their guys to support you > or fix the code for you. Either way, it's hard not to appreciate the > philosophy of free software. Oh it's a great philosophy but having access to the source is only useful for a small subset of the user base, it's not something that you could sell to the average business owner as a benefit.
Back to alt.comp.freeware | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Juniper faces many questions after spying code planted in software Anonymous <anonymous@hoi-polloi.org> - 2015-12-21 09:17 +0100
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:07 -0500
Re: Juniper faces many questions after spying code planted in software linuxiac <linuxiac@usa.com> - 2015-12-21 14:47 +0000
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:58 -0500
Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-21 15:37 +0000
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 10:45 -0500
Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-23 10:12 +0000
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-23 11:19 -0500
Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-24 11:41 +0000
Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-24 14:21 +0100
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 11:54 -0700
Re: Juniper faces many questions after spying code planted in software Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-24 13:49 -0800
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 15:24 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-24 15:32 -0700
Re: Juniper faces many questions after spying code planted in software "Ezekiel" <zeke@nosuchemail.com> - 2015-12-24 20:00 -0500
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 06:55 -0600
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 11:08 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 13:26 -0600
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 13:02 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:30 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:01 -0600
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:33 -0700
Re: Juniper faces many questions after spying code planted in software Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-28 20:45 -0500
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:02 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:53 -0700
Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2015-12-30 01:35 +0000
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-29 19:03 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:15 -0600
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:33 -0700
Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2016-01-03 05:18 +0000
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:24 -0600
Re: Juniper faces many questions after spying code planted in software Wildman <best_lay@yahoo.com> - 2015-12-28 15:17 -0600
Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <anonymous@foto.nl1.torservers.net> - 2015-12-28 18:05 -0500
Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-29 21:00 +0000
Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <nobody@remailer.paranoici.org> - 2015-12-28 23:26 +0000
Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2015-12-29 00:54 +0000
Re: Juniper faces many questions after spying code planted in software G. Morgan <graham@grahammorgan.name> - 2015-12-30 16:39 -0600
Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-31 03:20 +0000
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-31 08:25 -0600
Re: Juniper faces many questions after spying code planted in software Nomen Nescio <nobody@dizum.com> - 2016-01-01 11:47 +0100
Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2016-01-01 11:38 +0000
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2016-01-01 11:11 -0500
Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 14:42 -0500
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:34 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:03 -0600
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:35 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:21 -0600
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:54 -0700
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-29 18:07 -0500
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:05 -0600
Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-30 13:13 +0100
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:32 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-30 13:36 -0700
Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 16:35 -0500
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 16:55 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:38 -0700
Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:00 -0700
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:24 -0600
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:55 -0700
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:36 -0700
Re: Juniper faces many questions after spying code planted in software "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-29 03:26 +0100
Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:56 -0700
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-24 10:46 -0500
Re: Juniper faces many questions after spying code planted in software Jeremy Bentham <nobody@anemone.mooo.com> - 2015-12-21 23:38 +0100
Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 19:05 -0500
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-22 07:04 -0600
Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-21 09:10 -0600
csiph-web