Re: [Full-disclosure] vswitches: physical networks obsolete?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

phocean said the following on 06/02/11 16:58:

So my worries remain... how do they address this?
You don't mean that we have to wait for the next 0-day for the VMware
claim to be proved false? There are coding vulnerabilities everywhere.

We could wait for the next 0day of HP procurve, Cisco Catalyst or Dell
PowerConnect firmware as well ;)

The history of software bugs so far tells us that, until now, the chance to have
a 0day of a firewall is greater than the chance of the 0day of a switch firmware.

I am not telling that switches are bulletproof, I am only talking about probability.



Ciao,
luigi

- --
/
+--[Luigi Rosa]--
\

Any small object that is accidentally dropped will hide under a larger object.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1O0GkACgkQ3kWu7Tfl6ZTahgCfWVHLy/OD/58XOgN2ovanl/dT
LJgAnjtPyYCRujnL/3tzZJ/4K9CcTCF8
=xaty
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: OT: Then and than [WAS: chroot to oldlinux...]
    ... when you are trying to convey the order (chronologically or ... Than is used when comparing two things as I am bigger ... chance of getting wrong, anything in which I have a 50% chance of ... Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org ...
    (Fedora)
  • Re: lost+found?
    ... > Hash: SHA1 ... You need GnuPG to verify this message ... >> It gives the user a chance to check the information to see if it is ...
    (alt.os.linux)
  • Re: Getting started with DTrace in FreeBSD-current (a.k.a. 8)
    ... adopters a chance to try it before exposing it to the world at large. ... Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org ...
    (freebsd-current)
  • Re: [opensuse] Flash not layering right
    ... anyone bring it up (though there's always the chance I might have missed it) ... or see anything in a FAQ about it, I'm beginning to wonder if it's just me. ... I think I recall reading somewhere that it is a known "feature" of flash in linux. ... Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ ...
    (SuSE)