Re: Juniper faces many questions after spying code planted in software

From	Peter Köhlmann <peter-koehlmann@t-online.de>
Newsgroups	alt.comp.freeware, alt.computer.security, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Subject	Re: Juniper faces many questions after spying code planted in software
Date	2015-12-24 14:21 +0100
Organization	DNLA GmbH
Message-ID	<n5grbr$1gu$1@dont-email.me> (permalink)
References	(4 earlier) <n5967f$nb4$1@deskrabbit.motzarella.org> <n596l6$om4$2@dont-email.me> <n5drtg$al4$1@deskrabbit.motzarella.org> <n5ehe4$lsd$1@dont-email.me> <n5glfl$din$1@deskrabbit.motzarella.org>

Cross-posted to 5 groups.

Show all headers | View raw

Desk Rabbit wrote:

> On 23/12/2015 16:19, Slimer wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> On 2015-12-23 5:12 AM, Desk Rabbit wrote:
>>> On 21/12/2015 15:45, Slimer wrote:
>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>>
>>>> On 2015-12-21 10:37 AM, Desk Rabbit wrote:
>>>>> On 21/12/2015 14:58, Slimer wrote:
>>>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>>>>
>>>>>> On 2015-12-21 9:47 AM, linuxiac wrote:
>>>>>>> On Mon, 21 Dec 2015 09:07:43 -0500, Slimer wrote:
>>>>>>>
>>>>>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>>>>>>
>>>>>>>> On 2015-12-21 3:17 AM, Anonymous wrote:
>>>>>>>>> The discovery of spying code nestled deeply in
>>>>>>>>> Juniper's networking equipment, the latest example of a
>>>>>>>>> major IT vendor caught up in an damaging cyberattack,
>>>>>>>>> raises many questions.
>>>>>>>>>
>>>>>>>>> Juniper said Thursday that one of its firewall
>>>>>>>>> operating systems had been modified to allow secret
>>>>>>>>> access, posing a huge threat to companies and
>>>>>>>>> organizations using the equipment.
>>>>>>>>>
>>>>>>>>> Security experts wondered how the modifications could
>>>>>>>>> have been made years ago to some of Juniper's most
>>>>>>>>> sensitive source code without it knowing until
>>>>>>>>> recently. Companies try to vigorously protect their
>>>>>>>>> source code, which is an IT company's core intellectual
>>>>>>>>> property.
>>>>>>>>>
>>>>>>>>> http://www.pcworld.com/article/3017395/juniper-faces-many->>>>>>>>>
>>>>>>>>>
>> questions-after-spying-code-planted-in-software.html
>>>>>>>>>
>>>>>>>>> Another unix based product full of security holes.
>>>>>>>>> Imagine that.
>>>>>>>>
>>>>>>>> I'm just wondering whether the source code of the
>>>>>>>> product was open to everyone or whether it was
>>>>>>>> proprietary. The article doesn't say much about it.
>>>>>>>
>>>>>>> It's based on FreeBSD. I believe it's proprietary but I'm
>>>>>>> not positive.
>>>>>>
>>>>>> If anything, the article makes proprietary software rather
>>>>>> than UNIX or Linux look bad. Even as a Windows user, I see
>>>>>> the benefit of free software as something which would prevent
>>>>>> such things from occurring.
>>>>>
>>>>> Can't see how. At least commercial companies with proper
>>>>> certification will be required to audit on a regular basis
>>>>> (Note this was found "“During a recent internal code review").
>>>>>
>>>>> There have been a number of bugs in open source that IIRC have
>>>>> been around a long time, reported and left unfixed.
>>>>>
>>>>> Unless you are a coding expert and have hours to spend pouring
>>>>> over the source code looking for backdoors, bugs etc, having
>>>>> access to the source code is no benefit.
>>>>>
>>>>> Bottom line, all code can be compromised.
>>>>
>>>> Agreed. The difference is that if you DO find a problem with
>>>> free software of any kind, you can fix it yourself rather than
>>>> wait for some developer to do it. Still, most people would wait.
>>>
>>> Most cars have service manuals (Haynes) but very few people have
>>> the skill, tools and time to repair them, the same is true of Open
>>> Source software. Besides which, unless you get your code back into
>>> the repo and approved, you'll be running a different version. Also
>>> fixing a single bug in isolation could cause more problems if you
>>> don't understand how the whole lot works so you could introduce a
>>> new set of problems.
>>>
>>> It's a nice idea but few small businesses (Who make up the majority
>>> of businesses here in the UK) don't have the skills in house to
>>> fix software so they'd have to hire someone. This makes Open Source
>>> more expensive in the long run.
>>
>> You might be right. I guess that in the end, free software ends up
>> being the cheaper choice only if you either produce it from scratch
>> and have people in house customize all of the code for you to create a
>> separate, almost proprietary version strictly for your company's use
>> or if you buy something like Redhat and get their guys to support you
>> or fix the code for you. Either way, it's hard not to appreciate the
>> philosophy of free software.
> 
> Oh it's a great philosophy but having access to the source is only
> useful for a small subset of the user base, it's not something that you
> could sell to the average business owner as a benefit.

You are truly a snittish idiot. Having the source is useful for every user, 
even if he is a total non-programmer. It makes certain that the programs are 
available and changeable. 
With closed source much software has vanished because someone decided that 
it should be that way. Even if users wanted to keep it. At some point it 
simply does not work anymore or is outdated because nobody can do updates

But you lack the brains for such simple concepts

Thread

Juniper faces many questions after spying code planted in software Anonymous <anonymous@hoi-polloi.org> - 2015-12-21 09:17 +0100
  Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:07 -0500
    Re: Juniper faces many questions after spying code planted in software linuxiac <linuxiac@usa.com> - 2015-12-21 14:47 +0000
      Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 09:58 -0500
        Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-21 15:37 +0000
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 10:45 -0500
            Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-23 10:12 +0000
              Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-23 11:19 -0500
                Re: Juniper faces many questions after spying code planted in software Desk Rabbit <me@example.com> - 2015-12-24 11:41 +0000
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-24 14:21 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 11:54 -0700
                Re: Juniper faces many questions after spying code planted in software Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-24 13:49 -0800
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-24 15:24 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-24 15:32 -0700
                Re: Juniper faces many questions after spying code planted in software "Ezekiel" <zeke@nosuchemail.com> - 2015-12-24 20:00 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 06:55 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 11:08 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 13:26 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 13:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:30 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:01 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:33 -0700
                Re: Juniper faces many questions after spying code planted in software Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-28 20:45 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:02 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:53 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2015-12-30 01:35 +0000
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-29 19:03 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:15 -0600
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:33 -0700
                Re: Juniper faces many questions after spying code planted in software vallor <vallor@cultnix.org> - 2016-01-03 05:18 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Wildman <best_lay@yahoo.com> - 2015-12-28 15:17 -0600
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <anonymous@foto.nl1.torservers.net> - 2015-12-28 18:05 -0500
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-29 21:00 +0000
                Re: Eddie Haskell admits: William Jefferson Clinton lied to the country when he said Iraq had WMD Anonymous <nobody@remailer.paranoici.org> - 2015-12-28 23:26 +0000
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2015-12-29 00:54 +0000
                Re: Juniper faces many questions after spying code planted in software G. Morgan <graham@grahammorgan.name> - 2015-12-30 16:39 -0600
                Re: Juniper faces many questions after spying code planted in software Anonymous <nobody@remailer.paranoici.org> - 2015-12-31 03:20 +0000
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-31 08:25 -0600
                Re: Juniper faces many questions after spying code planted in software Nomen Nescio <nobody@dizum.com> - 2016-01-01 11:47 +0100
                Re: Juniper faces many questions after spying code planted in software "p-0''0-h the cat (UK) - The voice of the Sheeple" <super.pooh@furryfreeware.invalid> - 2016-01-01 11:38 +0000
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2016-01-01 11:11 -0500
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 14:42 -0500
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.net> - 2015-12-28 13:34 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-28 15:03 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:35 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:21 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:54 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-29 18:07 -0500
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-30 06:05 -0600
                Re: Juniper faces many questions after spying code planted in software Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-30 13:13 +0100
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-30 09:32 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-30 13:36 -0700
                Re: Juniper faces many questions after spying code planted in software Caver1 <caver1@inthemud.org> - 2015-12-28 16:35 -0500
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 16:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:38 -0700
                Re: Juniper faces many questions after spying code planted in software Snit <usenet@gallopinginsanity.com> - 2015-12-28 19:00 -0700
                Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-29 06:24 -0600
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:55 -0700
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-28 18:36 -0700
                Re: Juniper faces many questions after spying code planted in software "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-29 03:26 +0100
                Re: Juniper faces many questions after spying code planted in software Snerdly <noneofyourbusiness@anyway.com> - 2015-12-29 13:56 -0700
                Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-24 10:46 -0500
        Re: Juniper faces many questions after spying code planted in software Jeremy Bentham <nobody@anemone.mooo.com> - 2015-12-21 23:38 +0100
          Re: Juniper faces many questions after spying code planted in software Slimer <.m@nsn.s> - 2015-12-21 19:05 -0500
          Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-22 07:04 -0600
      Re: Juniper faces many questions after spying code planted in software chrisv <chrisv@nospam.invalid> - 2015-12-21 09:10 -0600

csiph-web