Gone are the days when you could go into CompUSA and pick up a part like this, unless you guys have a few cards around the office or have a few connections to get equipment to set this up...
I have Centurylink at home. I can do a quick check from there when I get home. Maybe unrelated, but I was having some severe issues with DNS a couple weeks back at home.
Both a non-significant threat and already resolved by the major distros. But good to be aware of these things. Good reminder that physical access means security has been breached.
Now one might argue that the solution provider does take this into consideration and fully expects their customers to rebuy when "required to" because the underlying software is considered a security risk. But we all know that this is rarely if ever the case.
Yes but... it makes it the customer's fault 🙂
What's just as bad is often the vendor doesn't have a new solution either.
No different than offering no solution at all. It means that the vendor no longer offers a supported product. Time to move on.
Who knows how long this vulnerability was in place? Seems like they really wouldn't want to disclose that information or just don't know. Kind of sad for a security company.
This likens back to the Lenovo conversation. Are they malevolent or just incompetent?
