Live data from Hacker News

NetUSB Impacts the Security of Millions of Devices Worldwide

blog.sec-consult.com

41–43 of 43 posts

Re: NetUSB Impacts the Security of Millions of Devices Worldwide

#41
post #14

Sigh.... I should probably replace my commercial-grade WiFi router with some custom box that can run OpenBSD or something. When I first got it, I tried to go through and lock down everything I could find. But I suspect that may not be enough.

The first thing I consider choosing router is OpenWRT availability for the model

Re: NetUSB Impacts the Security of Millions of Devices Worldwide

#42
> We tried to get in contact with KCodes back in February 2015 and provided them with a detailed vulnerability analysis including proof of concept exploit code. They sent a few nonsensical responses and then further ignored us.

Working at a Taiwanese company, unfortunately this does not surprise me at all: both the nonsensical (ie. likely no foreign educated and definitely no native speakers on the team), or being ignored ("I have no idea what they are on about but if we don't reply, maybe they will go away") :(

I love this place to pieces, but could use a few level-ups in English, technical skills, and customer support.

Re: NetUSB Impacts the Security of Millions of Devices Worldwide

#43
post #11

Earlier quoted context omitted.

> What sort of programmer writes code to The sort of programmer who's not passionate about how the code looks, or works, as long as it passes the (very rudimentary) tests which don't cover protocol violations or borderline cases. The sort of programmer that didn't have any experience and directly went from Sandbox-Java to bare-metal kernel-code in his first project? I don't want to disillusion you, but I know plenty…

I don't want to disillusion you, but I know plenty of people with (at least part-time) programming jobs who don't care at all about all the new programming paradigms, programming languages, libraries, frameworks... boasted often here on HN. I'd say that a huge majority is pretty pleased with what they know, as long as it's enough to do the job. Actually I'd consider myself in that group; most of my work is in Asm and…

> To put it a bit more bluntly: when you're writing in Asm on a > machine running DOS, and any bug is probably going to make you > reboot, you quickly tire of hitting the reset button and learn > to think more carefully about what you write. Although I've > migrated from such an environment a long time ago, the habit > has stuck.

I completely agree, a good argument for teaching programming "from the bottom up".

Post reply on HN