Derek Wuelfrath wrote: > Thanks again for that fabulous email. Agreed. That explains the scenario perfectly and, I agree, it is an issue. At the very least, it changes the security domain a device is in and could potentially result in catastrophic results.
Take the scenario further and consider MAC addresses of essential systems such as door access controllers, wireless access points, etc. Or, perhaps pulling an administrative computer into the game network where an attacker could also have a machine. No firewall between the attacker and the admin system anymore. Great catch. Looking forward to seeing this get resolved. > Cheers! > dw. -- --------------------------- Jason 'XenoPhage' Frisvold [email protected] --------------------------- "Any sufficiently advanced magic is indistinguishable from technology.\" - Niven's Inverse of Clarke's Third Law ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
