Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-06 Thread chedder1
COULD, this article makes no specific claims.  the chinese government COULD 
have a audio recording device hidden inside your asshole at this very moment.
On Thu, Mar 06, 2008 at 10:09:53AM +1100, Ivan . wrote:
 http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html
 
 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-06 Thread Ivan .
so what? It doesn't have to make specific ascertains. The fact of the
matter is that government sponsored corporate/industrial espionage
happens all the time.

Echelon spy network revealed
http://news.bbc.co.uk/1/hi/world/503224.stm

Echelon: Government spying breeds business distrust
http://news.zdnet.co.uk/itmanagement/0,100308,2079881,00.htm

Update: America uses Echelon to spy on Britain
http://news.zdnet.co.uk/security/0,100189,2079921,00.htm

On Thu, Mar 6, 2008 at 8:21 PM, [EMAIL PROTECTED] wrote:
 COULD, this article makes no specific claims.  the chinese government COULD 
 have a audio recording device hidden inside your asshole at this very moment.

 On Thu, Mar 06, 2008 at 10:09:53AM +1100, Ivan . wrote:
  http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html
 
  ___



  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-06 Thread Kurt Dillard
The assertions in the article and some of the comments in this thread sure
look racist and xenophobic to me. Why is it more risky that a product is
produced in China than if its made in Seattle, WA; Arlington, VA; Mexico
City; London; or Berlin? The Chinese may have the skill and motivation to do
this, but so does the USA, Russia, France, and most of the first world
countries. You read about China breaking into US government computers, what
you don't read about so much is the industrial espionage facilitated by
Israeli and European governments to help firms within their countries to
compete much less all of the spying the US does against the entire world.
The risk is there, the risk may be higher with certain products and specific
open source projects, but its there regardless of where the product is made.
On top of that, a very large portion of the designers, engineers, and
programmers for high-tech products made in the USA are foreign nationals.
Why would the Chinese government need to slip a back door into a router
where all they could do is pick up encrypted network traffic when instead
they could turn a kernel programmer at Apple, Sun, or Microsoft and get a
backdoor slipped into the encryption algorithms and the kernel itself?


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-06 Thread Leif Ericksen
Gee Echelon is that not OLD news like news that is over 10 years old???
I remember hearing about echelon at the very least 10-11 years ago.




--
Leif Ericksen
On Thu, 2008-03-06 at 20:46 +1100, Ivan . wrote:
 so what? It doesn't have to make specific ascertains. The fact of the
 matter is that government sponsored corporate/industrial espionage
 happens all the time.
 
 Echelon spy network revealed
 http://news.bbc.co.uk/1/hi/world/503224.stm
 
 Echelon: Government spying breeds business distrust
 http://news.zdnet.co.uk/itmanagement/0,100308,2079881,00.htm
 
 Update: America uses Echelon to spy on Britain
 http://news.zdnet.co.uk/security/0,100189,2079921,00.htm
 
 On Thu, Mar 6, 2008 at 8:21 PM, [EMAIL PROTECTED] wrote:
  COULD, this article makes no specific claims.  the chinese government COULD 
  have a audio recording device hidden inside your asshole at this very 
  moment.
 
  On Thu, Mar 06, 2008 at 10:09:53AM +1100, Ivan . wrote:
   http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html
  
   ___
 
 
 
   Full-Disclosure - We believe in it.
   Charter: http://lists.grok.org.uk/full-disclosure-charter.html
   Hosted and sponsored by Secunia - http://secunia.com/
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 
 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Ivan .
http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread coderman
On Wed, Mar 5, 2008 at 3:09 PM, Ivan . [EMAIL PROTECTED] wrote:
 http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html

they also pwned my toothpaste and gave me diarrhea :( :( :(

H A C K E D B Y C H I N E S E, LOLOLOLOLOL

titan rain is dark comedy at its finest!

(( how many orgs / govs actually do due diligence and audit third
party hardware / software / systems they purchase ?? ))

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Ivan .
wouldn't be the first time that National intelligence agencies have
comprised IT gear

http://en.wikipedia.org/wiki/Crypto_AG

On Thu, Mar 6, 2008 at 10:51 AM, coderman [EMAIL PROTECTED] wrote:
 On Wed, Mar 5, 2008 at 3:09 PM, Ivan . [EMAIL PROTECTED] wrote:
   
 http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html

  they also pwned my toothpaste and gave me diarrhea :( :( :(

  H A C K E D B Y C H I N E S E, LOLOLOLOLOL

  titan rain is dark comedy at its finest!

  (( how many orgs / govs actually do due diligence and audit third
  party hardware / software / systems they purchase ?? ))


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread coderman
On Wed, Mar 5, 2008 at 4:07 PM, Ivan . [EMAIL PROTECTED] wrote:
 wouldn't be the first time that National intelligence agencies have
  comprised IT gear

true; i just meant that an elaborate back door isn't even necessary
when the front door lock can be bumped open (titan rain :)

the athens affair is another fun example of the folly of running
arbitrary and un tested / audited code on your infrastructure...

http://spectrum.ieee.org/print/5280

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread worried security
On Wed, Mar 5, 2008 at 11:51 PM, coderman [EMAIL PROTECTED] wrote:
 On Wed, Mar 5, 2008 at 3:09 PM, Ivan . [EMAIL PROTECTED] wrote:
  http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html

 they also pwned my toothpaste and gave me diarrhea :( :( :(

 H A C K E D B Y C H I N E S E, LOLOLOLOLOL

 titan rain is dark comedy at its finest!

 (( how many orgs / govs actually do due diligence and audit third
 party hardware / software / systems they purchase ?? ))

shut up coderman, this is actually a serious subject.

there was even a .mil report about it that i spammed to the list a not
long back :)

no one paid attention though:

http://www.thetrumpet.com/index.php?q=4524.2780.0.0

http://www.govexec.com/story_page.cfm?articleid=38713dcn=todaysnews

this is actually a serious subject i wanted securityfocus to cover but
they ignored my e-mails!
i also contacted cnet news at the time and they ignored my e-mails.

pay attention to the security community next time!

we're telling you things we want you to put in your news articles to
send signals to the government but you ignore us.

what's the point of this mailing list being here if the media won't
work with the underground to send messages to the high ups in our
corrupt governments?

fuck the media! :)

http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058845.html

http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058850.html

Date: Wed, 5 Dec 2007 08:33:09 +
From: n3td3v [EMAIL PROTECTED]
To: [EMAIL PROTECTED], [EMAIL PROTECTED],
Subject: Fwd: Report: Foreign Countries Develop U.S. Defense Systems Software

Please can you publish this, America deserves to know how stupid Bush admin
 are.

OK, we already knew how stupid they are, but please publish this cnet
and securityfocus editors, its time to get the Bush admin and MI5 back
for spewing all that anti-China propaganda to the media recently.

Bush admin and MI5 are a bunch of incompetent bastards putting our
national security at risk, how dare they put national security at risk
by out sourcing its .mil software to the number 1 cyber enemy, CHINA.

The truth comes out in the end!!!

Its too LOL to be true.

PUBLISH PUBLISH PUBLISH!!! The American people deserve to know the
truth!!

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread quispiam lepidus
Typical media dramatization. No where in the article does it state that
backdoors HAVE been found in router firmwares.

Next we'll be seeing Japanese tactical nukes Hidden in Toyota trunks



 On Thu, Mar 6, 2008 at 10:09 AM, Ivan . [EMAIL PROTECTED] wrote:

 
  http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Larry Seltzer
Next we'll be seeing Japanese tactical nukes Hidden in Toyota
trunks

And who knows what the French are putting in that cheese.
Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/ http://security.eweek.com/ 
http://blogs.pcmag.com/securitywatch/
http://blogs.pcmag.com/securitywatch/
http://blogs.pcmag.com/securitywatch/Contributing 
Contributing Editor, PC Magazine
[EMAIL PROTECTED]

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Times Enemy
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greets.

It does not matter so much if there is no hard proof about the router
firmware containing backdoors set in place by Chinese manufacturers.
~From a security perspective, it is a potential threat which should be
addressed, especially for western networks and those they trust.

It is not too far fetched of an idea.  Google yielded the following
fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml

If you want to be inundated with reading material on the matter, be
creative, or not too creative, with Google searches having to do with
China and western powers and businesses, specific to information warfare.

.te


Larry Seltzer wrote:
| Next we'll be seeing Japanese tactical nukes Hidden in Toyota
| trunks
|
| And who knows what the French are putting in that cheese.
| Larry Seltzer
| eWEEK.com Security Center Editor
| http://security.eweek.com/ http://security.eweek.com/
| http://blogs.pcmag.com/securitywatch/
| http://blogs.pcmag.com/securitywatch/
| http://blogs.pcmag.com/securitywatch/Contributing
| Contributing Editor, PC Magazine
| [EMAIL PROTECTED]
|
|
|
|
| 
|
| ___
| Full-Disclosure - We believe in it.
| Charter: http://lists.grok.org.uk/full-disclosure-charter.html
| Hosted and sponsored by Secunia - http://secunia.com/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkfPTUAACgkQVuM8PD1UnspxGwCfWA2YAcAk31lPkOeFUkOZm4ko
a64AniF5C+KgjpfrAuxEkkW45BM+xpGZ
=RwKm
-END PGP SIGNATURE-

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Ivan .
there is also the case of fake Cisco routers etc doing the rounds.
Whether these devices are back doored is anyones guess

http://news.zdnet.co.uk/communications/0,100085,39284348,00.htm

http://www.voipforyourbusiness.com/index.php?option=com_contenttask=viewid=115Itemid=1

On Thu, Mar 6, 2008 at 12:47 PM, Times Enemy [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1

  Greets.

  It does not matter so much if there is no hard proof about the router
  firmware containing backdoors set in place by Chinese manufacturers.
  ~From a security perspective, it is a potential threat which should be
  addressed, especially for western networks and those they trust.

  It is not too far fetched of an idea.  Google yielded the following
  fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml

  If you want to be inundated with reading material on the matter, be
  creative, or not too creative, with Google searches having to do with
  China and western powers and businesses, specific to information warfare.

  .te


  Larry Seltzer wrote:
  | Next we'll be seeing Japanese tactical nukes Hidden in Toyota
  | trunks
  |
  | And who knows what the French are putting in that cheese.
  | Larry Seltzer
  | eWEEK.com Security Center Editor
  | http://security.eweek.com/ http://security.eweek.com/
  | http://blogs.pcmag.com/securitywatch/
  | http://blogs.pcmag.com/securitywatch/
  | http://blogs.pcmag.com/securitywatch/Contributing
  | Contributing Editor, PC Magazine
  | [EMAIL PROTECTED]
  |
  |
  |
  |
  | 
  |
  | ___
  | Full-Disclosure - We believe in it.
  | Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  | Hosted and sponsored by Secunia - http://secunia.com/
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.4.8 (MingW32)
  Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

  iEYEARECAAYFAkfPTUAACgkQVuM8PD1UnspxGwCfWA2YAcAk31lPkOeFUkOZm4ko
  a64AniF5C+KgjpfrAuxEkkW45BM+xpGZ
  =RwKm
  -END PGP SIGNATURE-

  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread quispiam lepidus
Why stop at routers  switches? You could own far more devices by
backdooring BIOS', HDD's, etc, all of which are often produced in Far East
countries.


On Thu, Mar 6, 2008 at 12:47 PM, Times Enemy [EMAIL PROTECTED] wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Greets.

 It does not matter so much if there is no hard proof about the router
 firmware containing backdoors set in place by Chinese manufacturers.
 ~From a security perspective, it is a potential threat which should be
 addressed, especially for western networks and those they trust.

 It is not too far fetched of an idea.  Google yielded the following
 fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml

 If you want to be inundated with reading material on the matter, be
 creative, or not too creative, with Google searches having to do with
 China and western powers and businesses, specific to information warfare.

 .te


 Larry Seltzer wrote:
 | Next we'll be seeing Japanese tactical nukes Hidden in Toyota
 | trunks
 |
 | And who knows what the French are putting in that cheese.
 | Larry Seltzer
 | eWEEK.com Security Center Editor
 | http://security.eweek.com/ http://security.eweek.com/
 | http://blogs.pcmag.com/securitywatch/
 | http://blogs.pcmag.com/securitywatch/
 | http://blogs.pcmag.com/securitywatch/Contributing
 | Contributing Editor, PC Magazine
 | [EMAIL PROTECTED]
 |
 |
 |
 |
 | 
 |
 | ___
 | Full-Disclosure - We believe in it.
 | Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 | Hosted and sponsored by Secunia - http://secunia.com/
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.8 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iEYEARECAAYFAkfPTUAACgkQVuM8PD1UnspxGwCfWA2YAcAk31lPkOeFUkOZm4ko
 a64AniF5C+KgjpfrAuxEkkW45BM+xpGZ
 =RwKm
 -END PGP SIGNATURE-

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Ivan .
I dont think they have

http://www.hqlaptops.com/hard-drives/infected-seagate-hard-drives
http://www.taipeitimes.com/News/taiwan/archives/2007/11/11/2003387202

On Thu, Mar 6, 2008 at 1:28 PM, quispiam lepidus
[EMAIL PROTECTED] wrote:
 Why stop at routers  switches? You could own far more devices by
 backdooring BIOS', HDD's, etc, all of which are often produced in Far East
 countries.



 On Thu, Mar 6, 2008 at 12:47 PM, Times Enemy [EMAIL PROTECTED] wrote:


  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Greets.
 
  It does not matter so much if there is no hard proof about the router
  firmware containing backdoors set in place by Chinese manufacturers.
  ~From a security perspective, it is a potential threat which should be
  addressed, especially for western networks and those they trust.
 
  It is not too far fetched of an idea.  Google yielded the following
  fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml
 
  If you want to be inundated with reading material on the matter, be
  creative, or not too creative, with Google searches having to do with
  China and western powers and businesses, specific to information warfare.
 
  .te
 
 
 
  Larry Seltzer wrote:
  | Next we'll be seeing Japanese tactical nukes Hidden in Toyota
  | trunks
  |
  | And who knows what the French are putting in that cheese.
  | Larry Seltzer
  | eWEEK.com Security Center Editor
  | http://security.eweek.com/ http://security.eweek.com/
 
  | http://blogs.pcmag.com/securitywatch/
  | http://blogs.pcmag.com/securitywatch/
  | http://blogs.pcmag.com/securitywatch/Contributing
  | Contributing Editor, PC Magazine
  | [EMAIL PROTECTED]
  |
  |
  |
  |
  | 
 
  |
  | ___
  | Full-Disclosure - We believe in it.
  | Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  | Hosted and sponsored by Secunia - http://secunia.com/
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.4.8 (MingW32)
  Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
  iEYEARECAAYFAkfPTUAACgkQVuM8PD1UnspxGwCfWA2YAcAk31lPkOeFUkOZm4ko
  a64AniF5C+KgjpfrAuxEkkW45BM+xpGZ
  =RwKm
  -END PGP SIGNATURE-
 
 
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 


 ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Times Enemy
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greetings.

I agree, that the threat does not stop at firmware for routers and
switches.  Even with open source, or dare i type, even more so with open
source, the threat for maliciously modified code exists.  This is not a
new threat, per se, however, it is a growing threat which is fed by more
and more hardware being built/assembled/manufactured/what-have-you in
questionable countries/locations.

This is not isolated to the far east, though the far east is a perfectly
legitimate location for western users to NOT trust.  I would venture to
state that eastern users have already accepted that their products may
have gone 1984 on them.  It does not give me warm fuzzies that the way
the vast majority of production appears, at least one part of most
gizmos comes through the far east.

Without question, a security concern.

.te


quispiam lepidus wrote:
| Why stop at routers  switches? You could own far more devices by
| backdooring BIOS', HDD's, etc, all of which are often produced in Far
East
| countries.
|
|
| On Thu, Mar 6, 2008 at 12:47 PM, Times Enemy [EMAIL PROTECTED] wrote:
|
| Greets.
|
| It does not matter so much if there is no hard proof about the router
| firmware containing backdoors set in place by Chinese manufacturers.
| ~From a security perspective, it is a potential threat which should be
| addressed, especially for western networks and those they trust.
|
| It is not too far fetched of an idea.  Google yielded the following
| fairly quick: http://slashdot.org/articles/08/02/29/1642221.shtml
|
| If you want to be inundated with reading material on the matter, be
| creative, or not too creative, with Google searches having to do with
| China and western powers and businesses, specific to information warfare.
|
| .te
|
|
| Larry Seltzer wrote:
| | Next we'll be seeing Japanese tactical nukes Hidden in Toyota
| | trunks
| |
| | And who knows what the French are putting in that cheese.
| | Larry Seltzer
| | eWEEK.com Security Center Editor
| | http://security.eweek.com/ http://security.eweek.com/
| | http://blogs.pcmag.com/securitywatch/
| | http://blogs.pcmag.com/securitywatch/
| | http://blogs.pcmag.com/securitywatch/Contributing
| | Contributing Editor, PC Magazine
| | [EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkfPXWkACgkQVuM8PD1UnspGaACeIRRRYubyJOSXuWSwQdoLyqlJ
A1EAnAtBAlGyGIXOMk3OyEcHhpRi+hdN
=jaFt
-END PGP SIGNATURE-

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Julio Cesar Fort
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Quoting PC Pro article: SecureTest believes spyware could be easily
built into Asian-manufactured devices such as switches and routers,
providing a simple backdoor for companies or governments in the Far East
to listen in on communications.

It seems someone in this security company read Breakpoint, by Richard
A. Clarke, stole his thoughts and is making claims without any proof
products were actually backdoored just to gain some media attention.

- --
Julio Cesar Fort
Recife, PE, Brazil
www.rfdslabs.com.br - computers, sex, human mind, music and more.

PGP public key: http://www.rootshell.be/~sandimas/juliocesarfort.gpg

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHz1W9ySo2QtzTl10RAiRSAJwNx65oWpGDRZ4sMazHm14wrM3/dgCeLzGt
Z0o6vSOdqbis9kLkM8Bce4s=
=cnbG
-END PGP SIGNATURE-

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Jerome Jar
Come on, where are the evidences? Sounds pretty much like racialism.

Usually the engineers are having a hard time on even getting the
routers and switches functional for mass market; there won't be any
time left for them to plant well hidden backdoors.

On Thu, Mar 6, 2008 at 7:09 AM, Ivan . [EMAIL PROTECTED] wrote:
 http://www.pcpro.co.uk/news/173883/chinese-backdoors-hidden-in-router-firmware.html

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




-- 
Houston, we have a problem.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Valdis . Kletnieks
On Thu, 06 Mar 2008 11:38:27 +0800, Jerome Jar said:
 Come on, where are the evidences? Sounds pretty much like racialism.
 
 Usually the engineers are having a hard time on even getting the
 routers and switches functional for mass market; there won't be any
 time left for them to plant well hidden backdoors.

But that's the proof right there - the reason *why* they have so much
trouble getting the damned things to work is because they have to work
around the backdoors in the device... ;)


pgpv7tEvWbD76.pgp
Description: PGP signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread J.A. Terranson

On Thu, 06 Mar 2008 11:38:27 +0800, Jerome Jar said:

 Come on, where are the evidences? Sounds pretty much like racialism.

 Usually the engineers are having a hard time on even getting the
 routers and switches functional for mass market; there won't be any
 time left for them to plant well hidden backdoors.

 But that's the proof right there - the reason *why* they have so much
 trouble getting the damned things to work is because they have to work
 around the backdoors in the device... ;)

Before we blow this off with a good laugh we should all remember the back 
doors in other network gear.  Even so-called core equipment (anyone 
remember the backdoor into the [Nortel] Shasta (later known as BSN 5000)?

Assuming that any unaudited gear has a backdoor is just common sense.


-- 
Yours,
J.A. Terranson
sysadmin_at_mfn.org
0xpgp_key_mgmt_is_broken-dont_bother

What religion, please tell me, tells you as a follower of that religion
to occupy another country and kill its people? Please tell me. Does
Christianity tell its followers to do that? Judaism, for that matter?
Islam, for that matter? What prophet tells you to send 160,000 troops
to another country, kill men, women, and children? You just can't wear
your religion on your sleeve or just go to church. You should be
truthfully religious.

Mahmoud Ahmadinejad

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Chinese backdoors hidden in router firmware

2008-03-05 Thread Jerome Jar
OK, only if hidden backdoors are also part of their function specs...

I have friends in a router manufacturer. Besides basic functionalities
that a router must have, they usually have to deal with some
ridiculous requirements from customers. Mmmm, I also start to suspect
the customers *want* their backdoors ;-)

On Thu, Mar 6, 2008 at 12:28 PM,  [EMAIL PROTECTED] wrote:
 On Thu, 06 Mar 2008 11:38:27 +0800, Jerome Jar said:
   Come on, where are the evidences? Sounds pretty much like racialism.
  
   Usually the engineers are having a hard time on even getting the
   routers and switches functional for mass market; there won't be any
   time left for them to plant well hidden backdoors.

  But that's the proof right there - the reason *why* they have so much
  trouble getting the damned things to work is because they have to work
  around the backdoors in the device... ;)




-- 
Houston, we have a problem.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/