Cisco flaws

[Webstuff]

http://news.bbc.co.uk/1/hi/technology/4734415.stm

This is what you might term "widely used hardware"... it'd be like discovering a security flaw in windows (heh). Is this worrying anyone at all? It could be quite a big thing...

[Richard Conyard]

The patch was released in April, by this time it should have been applied.

[Rob Holmes]

Theres lots like this around - it's just how people deal with it.

Releasing details to a bunch of hackers is not good stewardship of information and damages the crdibility of the internet.

It does however force a fix - probably a little quicker than normal.

I discovered a particular massive flaw in one scripts that forms the very DNA of the web about 3 or 4 months ago. It's not easily fixed so we've kept it quiet for a while and have worked with a closed usergroup from the organisation that release the script.

Rob

[Webstuff]

You expect flaws in scripts, because no amount of debugging can compare to one running out its life on someone else's server; this is just somewhat "big". I'm scared that the nasty Y2K bug that destroyed civilization as we know it might be coming back :P