BugTraq
hacking the mitsubishi GB-50A Mar 22 2008 01:50AM
Chris Withers (chris simplistix co uk) (1 replies)
RE: hacking the mitsubishi GB-50A Mar 24 2008 03:06PM
Desai, Ashish (Ashish Desai fmr com) (2 replies)
Re: hacking the mitsubishi GB-50A Mar 25 2008 01:48PM
Chris Withers (chris simplistix co uk)
RE: hacking the mitsubishi GB-50A Mar 24 2008 05:09PM
James C. Slora Jr. (james slora phra com) (2 replies)
Re: hacking the mitsubishi GB-50A Mar 25 2008 08:02AM
Vincent Archer (archer tms frmug org)
Re: [BUGTRAQ] RE: hacking the mitsubishi GB-50A Mar 24 2008 06:54PM
Joe (joe avvanta com)
On Mon, 24 Mar 2008, James C. Slora Jr. wrote:

>> If you read your own post you would realize that Mitsubishi
>> kept the device ipaddress prefix as 192.168.1 so only you
>> can attack yourself.
>
>> 192.168 cannot be access from the internet ;-)
>> [unless you NAT at which point its your NAT config problem]
>
> Wow, I'm glad to hear that machines with private addresses can't be
> attacked unless NAT is misconfigured. I'm also glad that we only have to
> worry about attacks coming directly from the Internet, and that our LANs
> are as safe as ever.

A security "problem" that is only a problem if security =elsewhere= has
been breached... is not a problem in and of itself. The breach of your LAN
is the problem.

If the device can only be attacked locally then it's really a non-issue.
This is why securing your LAN is of paramount importance - because once
they cross your DMZ there is no end to the number of ways you're screwed.

--
Joe Harris Administrator - Unix Systems
Avvanta, Inc Security Officer Abuse Contact
(425) 818-9900 Hostmaster (DNS Administration)
(888) 662-5274 http://www.avvanta.com/

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus