Slashdot Mirror


Backdoor In RuggedOS Systems: Infrastructure, Military Systems Vulnerable

FhnuZoag writes "A backdoor has been found in Canadian based RuggedCom's 'Rugged Operating System', providing easy access to anyone with the devices's MAC address — something often publically displayed. Rugged OS is being used in a wide range of applications, including traffic control, power generation, and even U.S. Navy bases. The backdoor was first found over a year ago, and RuggedCom have so far refused to patch out the exploit." The exploit is trivial: each device has a permanent "factory" user, and an automatically generated password derived from the MAC.

8 of 154 comments (clear)

  1. Re:Nothing is 100% secure. by LordAndrewSama · · Score: 5, Funny

    There's a difference between "Nothing is 100% secure" and "Why yes sir, I will lay out the welcoming mat for you".

  2. Re:Nothing is 100% secure. by ColdWetDog · · Score: 5, Funny

    Never play cards with a man called Doc. Never eat at a place called Mom's. Never sleep with a woman whose troubles are worse than your own.

    Never trust an OS with the 'Rugged' in it's name.

    --
    Faster! Faster! Faster would be better!
  3. Re:Whois JC CREW? by Beardo+the+Bearded · · Score: 4, Funny

    Their website had a default password, sorry, couldn't help myself.

    --

    ---
    ECHELON is a government program to find words like bomb, jihad, plutonium, assassinate, and anarchy.
  4. Re:This word, "rugged" by machine321 · · Score: 4, Funny

    It means "covered with carpet", right?

  5. Re:Nothing is 100% secure. by cayenne8 · · Score: 3, Funny

    never get involved in a land war in Asia Never go against a Sicilian when death is on the line

    Hmmm....I happen to have some iocane here....care to partake in a battle of wits?

    :)

    --
    Light travels faster than sound. This is why some people appear bright until you hear them speak.........
  6. It was a typo. by HiggsBison · · Score: 5, Funny

    It was supposed to be RiggedOS.

    --
    My other car is a 1984 Nark Avenger.
  7. Re:Nothing is 100% secure. by Anonymous Coward · · Score: 2, Funny

    Or let's just say Beardo forgot the password. "Oh, I think it was a seven-digit prime number... I don't think I wrote that down anywhere..."

    Why on earth would he set the password to 8675309? That's just silly.

  8. Re:Nothing is 100% secure. by Sam+Nitzberg · · Score: 4, Funny

    Never say never