Rarely Patched Software Bugs in Home Routers Cripple Security
http://www.wsj.com/articles/rarely-patched-software-bugs-in-home-routers-cripple-security-1453136285
The reason: A component maker had included the 2002 version of
Allegro's software with its chipset and hadn't updated it.
Router makers used those chips in more than 10 million devices.
The router makers said they didn't know a later version of
Allegro's software fixed the bug. The router flaw highlights an
enduring problem in computer security: Fixing bugs once they
have been released into the world is sometimes difficult and
often overlooked. The flaw's creator must develop a fix, or
"patch." Then it often must alert millions of technically
unsophisticated users, who have to install the patch. The chain
can break at many points: Patches aren't distributed. Users
aren't alerted or neglect to apply the patch. Hackers exploit
any weak link.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
