12-22-2015, 11:15 PM
(This post was last modified: 12-22-2015, 11:27 PM by SteelCrysis.)
http://www.tomshardware.com/news/juniper...30805.html
This is nothing short of ridiculous. The "security community"–including this self-appointed neckbeard Matthew Green–is burying its head in the sand by obsessing about NSA backdoors when their products are such a bonanza of vulnerabilities that hackers don't have to use NSA backdoors, and his described process could just as well have happened without the NSA backdoor. "Doctor, heal thyself" comes to mind. To solve Juniper Network's issue in the short term, all that would have to be done is to change the parameters for the number generator on a regular basis. The long term solution is to build a better mousetrap.
But the self–apppointed "security experts" would rather throw the baby out with the bathwater than implement a simple fix and do any actual work to even attempt to provide the NSA with a highly secure backdoor. With such an attitude, they don't deserve any electronic security at all.
Edit: Here's a fucking prime example of what I'm talking about: http://www.tomshardware.com/news/oracle-...30807.html
The time to worry about your scary NSA backdoors boogeyman will be when companies get to the point that they don't lie to clients about security updates.
This is nothing short of ridiculous. The "security community"–including this self-appointed neckbeard Matthew Green–is burying its head in the sand by obsessing about NSA backdoors when their products are such a bonanza of vulnerabilities that hackers don't have to use NSA backdoors, and his described process could just as well have happened without the NSA backdoor. "Doctor, heal thyself" comes to mind. To solve Juniper Network's issue in the short term, all that would have to be done is to change the parameters for the number generator on a regular basis. The long term solution is to build a better mousetrap.
But the self–apppointed "security experts" would rather throw the baby out with the bathwater than implement a simple fix and do any actual work to even attempt to provide the NSA with a highly secure backdoor. With such an attitude, they don't deserve any electronic security at all.
Edit: Here's a fucking prime example of what I'm talking about: http://www.tomshardware.com/news/oracle-...30807.html
The time to worry about your scary NSA backdoors boogeyman will be when companies get to the point that they don't lie to clients about security updates.