CERT Finds Routers Increasingly Being Cracked
alteran writes "CERT has released a paper (PDF) analyzing changes in DOS attack methods. The new twist-- crackers are increasing getting into routers rather then servers and home PCs. The volume of noise a router could generate absolutely dwarfs what a computer could do. And unlike compromised servers, compromised routers could actually screw up the infrastructure of the Internet, not just blast people with packets. Worst of all, router administators appear to be even sloppier than their server counterparts in securing their machines."
Well, that's what they get for using DOS as the OS for their routers. Sheeeesh!! Some people will never learn!
Co-founder and designer at Music Nearby: http://musicnearby.com
Read your /. manifesto. You aren't allowed to like anything that is:
* Packaged slickly
* Designed for ease of use by non-geeks
So... how much do you think the number of attacks on routers went up because of this post on slashdot? heh. I think CERT might need to revise their numbers now.
Cheers,
-Alex
As far as backdoors go, this little company called Cisco also requires physical access to the hardware to reset forgotten passwords and such, because they didn't build in backdoors for such purposes.
You should check them out. They're not too well known yet, but they will be after they IPO. Check out www.cisco.com for more information!