Comment on D-Link refuses to patch yet another security flaw, suggests users just buy new routers — D-Link told users to replace NAS last week

psmgx@lemmy.world ⁨17⁩ ⁨hours⁩ ago

• pearsaltchocolatebar@discuss.online ⁨17⁩ ⁨hours⁩ ago

  Because they won’t support routers that were EOL a decade ago?

  source

  • SaharaMaleikuhm@feddit.org ⁨12⁩ ⁨hours⁩ ago

    Companies should be forced to release all source code for products that are “EOL”. I will never change my mind on this.

    source
  • Dran_Arcana@lemmy.world ⁨17⁩ ⁨hours⁩ ago

    Because that bug was so egregious, it demonstrates a rare level of incompetence.

    source

    • NaibofTabr@infosec.pub ⁨17⁩ ⁨hours⁩ ago

      that bug was so egregious, it demonstrates a rare level of incompetence

      I wish so much this was true, but it super isn’t. Some of the recent Cisco security flaws are just so brain-dead stupid you wonder if they have any internal quality control at all… and, well, there was the Crowdstrike thing…

      source

      • Dran_Arcana@lemmy.world ⁨15⁩ ⁨hours⁩ ago

        Idk, this was kind of a rare combination of “write secure function; proceed to ignore secure function and rawdog strings instead” + “it can be exploited by entering a string with a semicolon”. Neither of those are anything near as egregious as a use after free or buffer overflow. I get programming is hard but like, yikes.

        source
      • BigDanishGuy@sh.itjust.works ⁨8⁩ ⁨hours⁩ ago

        Some of the recent Cisco security flaws are just so brain-dead stupid you wonder if they have any internal quality control at all

        At the super budget prices Cisco charges, do you really expect quality control to be included? You’ve got to buy a quality control subscription for that. /s

        source
  • Corr@lemm.ee ⁨6⁩ ⁨hours⁩ ago

    Most reached EOL in may of this year.

    source