Posted on 12/23/2015 9:37:06 PM PST by Utilizer
Dual_EC weaknesses and Juniper error exploited, researchers say.
Security researchers suspect the United States' National Security Agency may have had a hand in the planting of unauthorised backdoors in Juniper's enterprise firewalls.
The network equipment vendor last week issued an urgent security alert for its NetScreen enterprise firewalls, after discovering "unauthorised code" in the device operating system that allows them to be fully compromised.
Juniper had discovered the code during an internal review. The backdoors - which had been in existence since 2012 - meant attackers could gain administrative access and decrypt VPN connections unnoticed.
Researchers have now said the backdoors could have only been planted by a handful of governments due to their sophistication. But it is unclear how the Juniper vulnerability was planted or by whom.
(Excerpt) Read more at itnews.com.au ...
At no point in history has any government ever wanted its people to be defenseless for any good reason ~ nully's son
Nut-job Conspiracy Theory Ping!
To get onto The Nut-job Conspiracy Theory Ping List you must threaten to report me to the Mods if I don't add you to the list...
The impact of these sort of things is that they cause incalculable damage to American brands around the world, which is why companies like Apple are digging in their heels about this sort of nonsense. Trust is a coin that is hard earned and easily spent.
Probably small consolation but this is only for ScreenOS and specifically does not mention JunOS which is the one I see in day to day use. FWIW.
Check out article and comments.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.