That’s what ISS researcher Michael Lynn discovered this week after he discovered ways unpatched Cisco routers could be compromised and gave a public talk about it, despite the fact Cisco and ISS cancelled the presentation and the vendor sued him and the Black Hat Conference.
Cisco and ISS said it was too early to release such information but Lynn said, “I felt I had to do what’s right for the country and the national infrastructure.” Say what you want about Lynn but he’s a man of strong convictions. He knew if he gave he talk he’d get sued and lose his job – and that’s exactly what happened.
News from Vegas yesterday has Lynn signing a settlement with Cisco and ISS stating he’ll turn over all his materials on his talk and the router exploits and never speak about the incident again. No word on how Cisco plans to wipes the memories of those who attended Lynn’s talk.
Interesting reading all around: Here’s the original story and a story on Lynn explaining his motives.
