nanog mailing list archives
Re: Saying goodnight to my GSR
From: Saku Ytti <saku () ytti fi>
Date: Sun, 21 Sep 2014 00:04:16 +0300
On (2014-09-20 14:25 -0600), Keith Medcalf wrote:
And what, exactly, is it vulnerable to?
Fair question. Felix Lindner has shown some ~0 budget attacks on IOS. But I'm not sure if there actually are known attack vectors for properly secured system (iACL, rACL in this case) Crash bugs are there probably, but those are likely in every release and some motivation + lab time might yield success DoS attack on platform, and if you're L2 connected to a router, most are DoSable anyhow, regardless of version. Personally, I wouldn't be too worried about this. If I were, I wouldn't dare to run any commercially or otherwise available networking operating system, they all have terrible history in terms of software reliability against attacks. But there appears to be no actual business-case for security, if we look at fortune500 companies who have been thoroughly pwned, it has not impacted their market cap. Public sector, including military are happy to buy 'audited' network connection from commercial companies running commercial systems, which all certainly are pwnable with extremely modest budget, regardless how new release they are running. -- ++ytti
Current thread:
- Re: Saying goodnight to my GSR, (continued)
- Re: Saying goodnight to my GSR James R Cutler (Sep 20)
- Re: Saying goodnight to my GSR Matthew S. Crocker (Sep 20)
- Re: Saying goodnight to my GSR Bacon Zombie (Sep 20)
- Re: Saying goodnight to my GSR Joel Jaeggli (Sep 20)
- Re: Saying goodnight to my GSR Daniel Sterling (Sep 20)
- Re: Saying goodnight to my GSR Bacon Zombie (Sep 20)
- Re: Saying goodnight to my GSR Daniel Sterling (Sep 20)
- RE: Saying goodnight to my GSR Keith Medcalf (Sep 20)
- Re: Saying goodnight to my GSR Ruairi Carroll (Sep 20)
- RE: Saying goodnight to my GSR Keith Medcalf (Sep 20)
- Re: Saying goodnight to my GSR Saku Ytti (Sep 20)
- Re: Saying goodnight to my GSR Alain Hebert (Sep 22)
- Message not available
- Re: Saying goodnight to my GSR Larry Sheldon (Sep 22)
- Re: Saying goodnight to my GSR Matthew S. Crocker (Sep 20)
- Re: Saying goodnight to my GSR James R Cutler (Sep 20)
- Re: Saying goodnight to my GSR Jared Mauch (Sep 20)
- Re: Saying goodnight to my GSR Tom Hill (Sep 21)
- RE: Saying goodnight to my GSR Justin M. Streiner (Sep 22)
- RE: Saying goodnight to my GSR Jim Devane (Sep 22)
- RE: Saying goodnight to my GSR Justin M. Streiner (Sep 22)