Re: [Full-disclosure] Cisco IOS Shellcode Presentation

From: Jason Coombs (jasonc_at_science.org)
Date: 07/29/05

  • Next message: Michael Holstein: "Re: [Full-disclosure] Cisco IOS Shellcode Presentation" 
    Date: Fri, 29 Jul 2005 08:56:27 -1000
To: Steve Friedl <steve@unixwiz.net>

    Steve Friedl wrote:
    > So you're suggesting that Cisco should have adopted security by
    > obscurity for its hardware design?

    How about adopting an architecture that incorporates special-purpose
    security safeguards into the CPU? Routers and switches don't need to
    execute arbitrary code, Cisco knows ahead of time, before they deploy a
    product, what code that product should be allowed to execute.

    Do you think there is no way in hardware to limit the code that gets
    executed? Maybe you should join the FBI.

    Sincerely,

    Jason Coombs
    jasonc@science.org
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/

  • Next message: Michael Holstein: "Re: [Full-disclosure] Cisco IOS Shellcode Presentation"