Comments on: Backdoors Found in Barracuda Networks Gear

By: SeymourB

SeymourB — Tue, 29 Jan 2013 17:24:50 +0000

I don’t see why they wouldn’t, its not like they need to practice what they preach.

Reports for some, miniature American flags for others!

By: Leslie Jones

Leslie Jones — Tue, 29 Jan 2013 16:35:36 +0000

It’s ironic – that’s for sure. Much like a spammer like Mike ‘how much can I pay you to work with me on this’ Perone frontin’ up an anti-spam racket.

Emailreg.org pay to spam service, anyone???

By: ioo

ioo — Tue, 29 Jan 2013 16:31:38 +0000

oh c’mon. Naming it a “firewall” doesn’t make it a firewall, right? Unless you’re in marketing… but then… gosh, maybe you also think Ironport has ports made of iron? ;->

By: Leslie Jones

Leslie Jones — Tue, 29 Jan 2013 15:59:21 +0000

A stooge of Drako’s by any chance?

The ‘Spam & Virus Firewall’ contains the word ‘Firewall’. It does not contain the phrase ‘Needs to be put behind a firewall’. Perhaps ‘Firewall’ means something else to Barracuda?

These are crud products – total network bottlenecks – with some of the worst code, worst security and slowest performance I’ve ever had the misfortune to use. Seriously, steer clear of this junk – it has that ‘made in a hobbiests bedroom’ quality about it, and Micheal Perone is a former spammer.

By: ioo

ioo — Tue, 29 Jan 2013 15:11:11 +0000

“variety of the latest firewall, spam filter and VPN appliances”? yeah, sure. Read original report instead of reposting wrong information. Firewalling product (NG Firewall) was actually not affected as it’s one of a few designed to be put into insecure network (unlike spam filter, which every thinking admin would put behind a firewall).
Keep your head up or Internet will start calling you craponsecurity!

By: Simon

Simon — Mon, 28 Jan 2013 10:06:57 +0000

Barracuda also had some sort of blacklist protection style scam going. Really you don’t want to do business with people like that.

By: JCitizen

JCitizen — Sun, 27 Jan 2013 17:24:16 +0000

I agree to that!

By: Jake

Jake — Sun, 27 Jan 2013 14:12:34 +0000

So I wonder if Congress is going to do a huge report on them?

By: jes j

jes j — Sun, 27 Jan 2013 10:12:24 +0000

@JCitizen, the problem is not a “reverse SSH”, it’s “out-of-the-box to listen for incoming SSH connections”.
That’s a port which is listening (waiting for…) connections on your Barracuda.

It should not exists.

By: JCitizen

JCitizen — Fri, 25 Jan 2013 20:35:31 +0000

Right on, Tim! :-bd