Re: [Full-disclosure] vswitches: physical networks obsolete?

[Luigi Rosa <lists@xxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

phocean said the following on 06/02/11 16:58:

> So my worries remain... how do they address this?
> You don't mean that we have to wait for the next 0-day for the VMware
> claim to be proved false? There are coding vulnerabilities everywhere.

We could wait for the next 0day of HP procurve, Cisco Catalyst or Dell
PowerConnect firmware as well ;)

The history of software bugs so far tells us that, until now, the chance to have
a 0day of a firewall is greater than the chance of the 0day of a switch 
firmware.

I am not telling that switches are bulletproof, I am only talking about 
probability.



Ciao,
luigi

- -- 
/
+--[Luigi Rosa]--
\

Any small object that is accidentally dropped will hide under a larger object.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1O0GkACgkQ3kWu7Tfl6ZTahgCfWVHLy/OD/58XOgN2ovanl/dT
LJgAnjtPyYCRujnL/3tzZJ/4K9CcTCF8
=xaty
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/