|
Does Verizon's Voyager stack up to the iPhone? |
|
|
5 IT skills that won't boost your salary
[1,407]
Women 4 times more likely than men to cough up personal info
[589]
Japan's 10 funniest tech-related commercials [Videos]
[407]
Throwing away a promo CD is "unauthorized distribution"?
[1,265]
Adults too quick to dismiss educational video games
[682]
Attack of the iPhone clones [Slideshow]
[578]
10 things IT needs to know about AJAX
[1,258]
This Year's 25 Geekiest 25th Anniversaries [Slideshow]
[409]
|
|
How can they be having this much problem?
Almost everyone uses Cisco equipment. They have to have physical access to the routers and even if they are not Cisco it should be no problem. I can get into any router no matter the password in under three minutes as long as I have physical access. And then I can change any password with no problem at all.
Every router in the world has this type of back door just for these cases. It does not surprise me however as almost every state employed IT person I have ever met is unqualified for their job.
I have had to do this in the private sector many many times. It's not that hard guys.
You need to RTFA
Sure, and if you try this in SF, you'll find that all the routing tables, all the config that WASN'T written to flash is now gone, and your FiberWAN is now just a bunch of shiny glass.
Then your challenge is to get it working again, cowboy. Let me know how that works out for you.
Sheesh.
We wont call you
"Sure, and if you try this in SF, you'll find that all the routing tables, all the config that WASN'T written to flash is now gone, and your FiberWAN is now just a bunch of shiny glass."
Guess we won't call you to do this properly then. There are MANY ways around CISCO routers that still allow the config to stay intact. Vulnerabilities in their IOS has been around for ages, and still exist. And Cisco knows of them just as well as anyone else who knows their security. But then, for those who don't, we won't be calling you to help or the SF guys either!!
(And even if you lost the config, it's not like setting up routers an swicthes would take more than a day to redefine, unless you have no clue what you're doing and their team never documented how their MAN functions)
LOL
All you guys are fighting about is the fact you can reset the routers.
This was childs point. He created the network, he did all the work. His colleagues were the incompetent ones.
When his super said he had performance issues. That must have been what through him off the edge.
Continued from above.
Rick Cook has written thousands of articles, and that means what--- he knows "Microsoft Word"?
Phaseit? WHO? No. Seriously...WHO?
Want to know SECURITY go take a few classes at SANS. (http://www.sans.org/)
SANS - those who create YOUR internet!
Is this a big deal?
why is all the hubbub about this guy blocking access to everyone else? Worst case they can contact the manufacturer of the servers, routers or whatever to regain access.
If they can't regain access, the whole IT department should be fired!!
The real solution
No really, who is this guy that wrote this article?
Because from what he wrote, it is meaningless. Mentioning NASA and the military and using 2 people's key to access something is not even a possibility. I'd be glad to be proven wrong, but I know I've worked on a great number of routers and switches from most manufacturers and have yet to see any type of authentication mechanism.. Doesn't exist. Not saying it wouldn't be a good idea to add to their OS, but doesn't exist currently.
And as configs stand now, there will always be someone who holds the top password/root access to something. Someone or multiple people in your orginization. Point is, any of those could kill the other accounts, and leave his only. That's why manufacturers of network appliances, system OS's, and the like all have a back way if you have physical access. Secure the physical access, alwys backup running config, always document and have a disaster recovery plan that is in multiple places.
There's how you recover! Not this guy who doesn't know what he is talking about!
this artice is the worst
piece of shit I've seen covering the Child accusation yet!
"You have a clue what the
"You have a clue what the OSI model is and what basic security practices are in a IT infrastructure -- there end of this article."
If you think Networking actually operates on the OSI model you're a joke. The OSI model is nothing but a convenient way of outlining general principles, and falls apart whenever applied to a real network. It's just not that simple.
The real problem here is that we have a massive influx of moron wannabes in the IT industry. People who watch ITT tech commercials and say to themselves "I could be a network engineer too! how hard can it be?" Just because you know how to set up a LAN at home does not make you network engineer. Unfortunately those are the kind of people that are finding their way in a lot of times. There are plenty of proven security policies and principles which could have prevented this entire mess from happening, but most of this guy's colleagues were obviously either too stupid or too lazy to care.
People like the anonymous psoter of the quote above are perfect examples of this. If you think you can break network security down into a one line statement about the OSI model, then you're a bloody windowlicker. If you're actually in a position to be in charge of entwork security for anything other than your home LAN, I weep for your employer.
would been nice to get in on some of that recovery cash
Well the city of SF got caught with the old knickers around their ankles. From the size of the cash being paid out it also sounds like they did not have any system configuration or image back up policy in place.
I just hope this does not result in an industry wide issue of suspecting all sys admins of being edgy and "rouge" ha ha.
Are there any articles that present Childs point of view? I'm curious because they either reallllly pissed him off or he, in fact, is edgy and rouge.
Post new comment