Re: [Full-Disclosure] Network Security in India

From: Des Ward (des_ward_at_o2.co.uk)
Date: 11/24/04

  • Next message: Berend-Jan Wever: "Re: [Full-Disclosure] Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]" 
    To: full-disclosure@lists.netsys.com
Date: Wed, 24 Nov 2004 09:21:28 GMT

    Doesn't auger well for all this offshoring though. :(
    -----Original Message-----
    From: "Samir Kelekar" <samir@teknotrends.com>
    Date: Wed, 24 Nov 2004 10:44:54
    To:"john morris" <me.morris@gmail.com>, <full-disclosure@lists.netsys.com>
    Subject: Re: [Full-Disclosure] Network Security in India

    Hi John:
    Thanks for that post. I am not at all surprised by the situation that you
    have
    described.

     One of India's top telecomm companies Reliance routinely violates laws and
    then gets away paying minimal fines. (The govt. is
    in their pocket).

    The situation wouldn't be much different in a lot of other places.

    Nasscom (the association of India's software companies) is trying to do its
    best enforcing good security practices in companies. Am not sure to what
    extent it has succeeded.

    Samir Kelekar
    Teknotrends Software
    Bangalore

    ----- Original Message -----
    From: "john morris" <me.morris@gmail.com>
    To: <full-disclosure@lists.netsys.com>
    Sent: Wednesday, November 24, 2004 3:03 AM
    Subject: [Full-Disclosure] Network Security in India

    > I had a brief stint Primus Telecom in delhi ( www.primus-direct.com).
    > It has a flat network with absolutely no security. The routers as as
    > vulnerable to any known exploit and the same applies to a few web
    > servers they host. The basics such as patch management is never taken
    > care of.
    > This mail doesnot intend to harm any one but i want to know is this
    > the way major ISP around the globe function.
    > The company functions on illegal frequencies (Primus's major customers
    > connect through RF links). I have the proofs to show that they do
    > function on frequencies not allocated to them and during routine check
    > ups by the DoT ( Department of Telecommunications Govt. of India) They
    > have to change the frequency for a while and do favors to the Govt.
    > Employees to keep the business going.
    > Well this is not my concern but somehow this seems unhealthy. Is this
    > a practise worldwide.
    > During my interview with a company major i insisted on my security
    > conern but the company was least bothered.
    > Would someone tell me is this the way the whole industry functions.
    > Inspite of reminders to the company that any lamer has the potential
    > to run them out of business by bringing their whole network down
    > within a few min( which includes the ETBwmgr , the netcache box or
    > even the main router(7500 series with a backup)) has been given a deaf
    > ear.
    > Is this the way a ISP with important clients in the pvt and the govt
    > key sectors functions.
    >
    > I personally doubt the future.
    >
    > Is Primus listening. Its time to wake up.
    >
    >
    >
    > --
    > (FROM LINKS TO LINKS WE ARE ALL LINKED)
    >
    > cheersssss.....
    >
    > morris
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    Kind regards,

    Des Ward

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Berend-Jan Wever: "Re: [Full-Disclosure] Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]"

    Relevant Pages

    • [Full-disclosure] Re: Full-Disclosure Digest, Vol 13, Issue 8
      ... DSplit - Tiny AV signatures Detector ... [Full-disclosure] DSplit - Tiny AV signatures Detector ... Title: WordPress: SQL injection vulnerability ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)
    • [Full-disclosure] unsubscribe
      ... Full-Disclosure Digest, Vol 25, Issue 27 ... Web Security and Bookmarklet Exploits ... packages fix insecure temporary file ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)
    • [Full-Disclosure] RE: Full-Disclosure digest, Vol 1 #649 - 5 msgs
      ... Firewall disablers ... Send Full-Disclosure mailing list submissions to ... RE: Security Certifications ... Security Certification Consortium has developed and released a potentially destructive trojan application, which masquerades as a valid standard for professional certification in the field of information security. ...
      (Full-Disclosure)
    • Re: [Full-disclosure] Full-Disclosure Digest, Vol 22, Issue 27
      ... Full-Disclosure Digest, Vol 22, Issue 27 ... Thesis for master degree ... Mandriva Linux 2007.0/X86_64: ... All packages are signed by Mandriva for security. ...
      (Full-Disclosure)
    • Re: [Full-disclosure] Full-Disclosure Digest, Vol 22, Issue 27
      ... Full-Disclosure Digest, Vol 22, Issue 27 ... Thesis for master degree ... Mandriva Linux 2007.0/X86_64: ... All packages are signed by Mandriva for security. ...
      (Full-Disclosure)