Title: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: unsupported on February 05, 2010, 03:39:30 PM

I first found some FUD on Yahoo and decided to search for the technical write-up which I found on Dark Reading (http://www.darkreading.com/insiderthreat/security/perimeter/showArticle.jhtml?articleID=222600993). I also found Tom Cross' white paper (http://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-wp.pdf) and PDF presentation (http://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-slides.pdf) from Black Hat this week.

Honestly, I do not believe that these back doors need to exist. Let law enforcement agencies obtain data the old fashion way, through a warrant.

What say you?

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: hayabusa on February 05, 2010, 03:59:50 PM

Fully agreed, and it goes to show that to have 'backdoors' available, they've now subjected their customers to further security risks and breaches. I'd read some info on this one, the other day, but hadn't had time to dive in.

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: Ketchup on February 05, 2010, 04:45:22 PM

I may not be considering the big picture properly, but I would have to agree. I am not sure why the backdoors are necessary. Like unsupported said, a warrant will get you access to the webmail account. To me, backdoors are always an afterthought or an oversight in any piece of software. They are never properly considered during security implementation.

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: unsupported on February 06, 2010, 08:50:02 AM

I forgot to include a link to my favorite scene...

http://www.youtube.com/watch?v=ahcVp8vIicI

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: don on February 08, 2010, 09:25:33 AM

Perfect.

Don

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: Bane on February 13, 2010, 12:45:08 AM

There's currently some speculation that the recent google attack originating from china abused a law enforcement backdoor. I have yet to see any solid proof, but an interesting idea none the less.

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: don on February 15, 2010, 03:13:38 PM

Or how about this article by Roger Grimes "Chinese government is innocent of cyber-attacks until proven guilty":

http://www.infoworld.com/d/security-central/chinese-government-innocent-cyber-attacks-until-proven-guilty-994

Don

Title: Re: Black Hat: Exploits found in Cisco routers law enforcement "backdoors".
Post by: unsupported on February 15, 2010, 08:44:42 PM

I'd hate to place all the blame on China, I mean, come on. How hard is it to setup a netcat relay through China? But no.. seriously, I blame them. What if these "backdoors" are not for LEO, but put in place because they are knock-off Chinese routers.

EH-Net

Ethical Hacking Discussions and Related Certifications => Hardware => Topic started by: unsupported on February 05, 2010, 03:39:30 PM