Monday, December 21, 2015

Juniper Networks backdoor confirmed, password revealed, NSA suspected

 The next mystery to solve is where this unauthorized code comes from. Security advisories usually relate to vulnerabilities arising from defects -- mistakes programmers made. In this case, someone deliberately inserted a backdoor password into Juniper's devices. That's a huge deal. If it's the NSA (which looks possible, given one leak about a program called "FEEDTROUGH" that installs persistent backdoors in Juniper devices) then it will mean that the US government deliberately sabotaged tens, if not hundreds, of thousands of networks that were protected by products from a US company that is the second-largest provider of networking equipment in the world, after Cisco. 

 

 So the NSA penetrated Cisco routers already , that story was last year, the largest provider of security networking, and now they've penetrated Juniper, the next in line provider. 

So , do you still want to by a "made in america" security solution for your company ? 


Me either. 


Persistance pays off in track and field. But not in gambling , and not in spycraft. All it does in spycraft is make sure no one every buys products from your country again.

 

 

 

No comments: