Brian Ford wrote:
>
> Umberto,
>
> Please see my comments in line.
Thanks Brian.
> >BTW, some CISCO guys over there sometime boasted to me about their
> >"incredibly reliable and secure embedded software", so no break-ins
> >could be available...
>
> I think you got some bad info. Yes, we at Cisco hope our software is
Yep, I think so... :-)
> "incredibly reliable and secure". We do have stringent development and
> test guidelines. But when a bug is found in any of our products we try to
> tell customers as much as possible about it and describe a fix or at a
> minimum a work around (at out web site http://www.cisco.com).
And I think you do the same as almost every other vendor in the
Security arena does: find bugs and release fixes. The problem is when
you find people stating: "Our tool it's not software, it's hardware, so
you can't break it". That's false obviously... but that's what some Cisco
guy here in Mexico say (Ok, I have to admit that I never heard that
personally, but some customers use to tell me that, specially about
Arrowpoint boxes).
It's obvious that every box shipped have some kind of software inside,
and that software it's not perfect (Axiom), so that software has bugs,
so you need to find that bugs and patch them!.
> >Well. Just have to check
> >http://interactiveinfosec.com/?openMenus=-1+10+60&selectedIndex=62
>
> Bad link.
Exuse me, that should be:
http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml
Thanks for your comments. Regards.
--
Martin Humberto Hoz Salvador
Information Security Consultant (ISS ICU, Check Point CCSE)
C I T I
Sendero Sur 285 Col. Contry, Monterrey, Nuevo Leon 64860, MEXICO
Phone: +(52)(8) 357-2267 x139 Fax: +(52)(8) 357-8047
E-mail: [EMAIL PROTECTED] WWW: http://www.citi.com.mx
PGPKey ID: 0x0454E8D9 ICQ Number: 31631540
GIT d- s:(+:+) a-- C+(++++)>$ SILH++++ P++ L+++ E W++ N+ o-- K- w
O M V PS+ PE++ Y+ PGP++ t 5 X+ R tv- b+ DI+ D++ G++ e++ h-- r+ y++
"The software said it requires Windows 95 or *better*, so I installed
GNU/Linux"
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
