There has been a lot of noise about this issue and I am not going to repeat what has been said. Instead here is a pointer to a good summary of links, Schneier's take and JOAT's disclosure point. Cisco did bad.
UPDATE I: A great interview. People don't patch Cisco you say? Hmmm. I remember asking about patching when Cisco came to our university to show off their VoIP stuff and their clueless response seemed to agree. If the new IOS architecture would be as vulnerable to exploitation as Lynn says, then he has done good work. Respect to the man for sticking by his ethics.
UPDATE II: You currently can't log into Cisco Connection Online website as their password database has been compromised. Hmmm.
Trackbacks
Trackback specific URI for this entry
No Trackbacks