Slashdot Mirror
Backdoor In RuggedOS Systems: Infrastructure, Military Systems Vulnerable
FhnuZoag writes "A backdoor has been found in Canadian based RuggedCom's 'Rugged Operating System', providing easy access to anyone with the devices's MAC address — something often publically displayed. Rugged OS is being used in a wide range of applications, including traffic control, power generation, and even U.S. Navy bases. The backdoor was first found over a year ago, and RuggedCom have so far refused to patch out the exploit."
The exploit is trivial: each device has a permanent "factory" user, and an automatically generated password derived from the MAC.
There's a difference between "Nothing is 100% secure" and "Why yes sir, I will lay out the welcoming mat for you".
Never play cards with a man called Doc. Never eat at a place called Mom's. Never sleep with a woman whose troubles are worse than your own.
Never trust an OS with the 'Rugged' in it's name.
Faster! Faster! Faster would be better!
It was supposed to be RiggedOS.
My other car is a 1984 Nark Avenger.