[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [BUGTRAQ] RE: hacking the mitsubishi GB-50A
On Mon, 24 Mar 2008, James C. Slora Jr. wrote:
If you read your own post you would realize that Mitsubishi
kept the device ipaddress prefix as 192.168.1 so only you
can attack yourself.
192.168 cannot be access from the internet ;-)
[unless you NAT at which point its your NAT config problem]
Wow, I'm glad to hear that machines with private addresses can't be
attacked unless NAT is misconfigured. I'm also glad that we only have to
worry about attacks coming directly from the Internet, and that our LANs
are as safe as ever.
A security "problem" that is only a problem if security =elsewhere= has
been breached... is not a problem in and of itself. The breach of your LAN
is the problem.
If the device can only be attacked locally then it's really a non-issue.
This is why securing your LAN is of paramount importance - because once
they cross your DMZ there is no end to the number of ways you're screwed.
Joe Harris Administrator - Unix Systems
Avvanta, Inc Security Officer Abuse Contact
(425) 818-9900 Hostmaster (DNS Administration)
(888) 662-5274 http://www.avvanta.com/