Please create an account to participate in the Slashdot moderation system

 


Forgot your password?
Close
typodupeerror
HP

HP Keeps Installing Secret Backdoors In Enterprise Storage 193

Posted by samzenpus from the that's-a-feature dept.
Nerval's Lobster writes "For the second time in a month, Hewlett-Packard has been forced to admit it built secret backdoors into its enterprise storage products. The admission, in a security bulletin posted July 9, confirms reports from the blogger Technion, who flagged the security issue in HP's StoreOnce systems in June, before finding more backdoors in other HP storage and SAN products. The most recent statement from HP, following another warning from Technion, admitted that 'all HP StoreVirtual Storage systems are equipped with a mechanism that allows HP support to access the underlying operating system if permission and access is provided by the customer.' While HP describes the backdoors as being usable only with permission of the customer, that restriction is part of HP's own customer-service rules—not a limitation built in to limit use of backdoors. The entry points consist of a hidden administrator account with root access to StoreVirtual systems and software, and a separate copy of the LeftHand OS, the software that runs HP's StoreVirtual and HP P4000 products. Even with root access, the secret admin account does not give support techs or hackers access to data stored on the HP machines, according to the company. But it does provide enough access and control over the hardware in a storage cluster to reboot specific nodes, which would 'cripple the cluster,' according to information provided to The Register by an unnamed source. The account also provides access to a factory-reset control that would allow intruders to destroy much of the data and configurations of a network of HP storage products. And it's not hard to find: 'Open up your favourite SSH client, key in the IP of an HP D2D unit. Enter in yourself the username HPSupport, and the password which has a SHA1 of 78a7ecf065324604540ad3c41c3bb8fe1d084c50. Say hello to an administrative account you didn't know existed,' according to Technion, who claims to have attempted to notify HP for weeks with no result before deciding to go public."

Comment Re:May have... (Score 1) 323

by IntentionalStance (#43651095) Attached to: English May Have Retained Words From an Ice Age Language
I certainly haven't had time to read the supporting papers carefully and consider them. I am not a professional linguist or cognitive scientist but it is a subject that has interested me for over 40 years, It's why I got into computers in the first place. Could you post some links to resources that could be informative to a keen amateur?

Comment Re:Words in common - Thai and English (Score 2) 323

by IntentionalStance (#43651035) Attached to: English May Have Retained Words From an Ice Age Language
Sure, cool, not starting a flame war here, it could be a coincidence but of course they are similar in a whole bunch of languages. See the articles supporting info. These words get a high score.

Plus I wasn't asserting that they were similar because they came from some 'proto-language' I was just making an observation that very, very different languages had some words that sounded rather similar and I thought it interesting.

Comment Words in common - Thai and English (Score 5, Interesting) 323

by IntentionalStance (#43650981) Attached to: English May Have Retained Words From an Ice Age Language
I'll do my best to render Thai words phonetically but it's not easy.

Mare - Mother or often in English Ma

Pore - Father or again often Pa

Fi - fire

Those are the only non-loan words that overlap that I've come across

It is interesting that there are any words in common of course

Slashdot Top Deals

"Stupidity, like virtue, is its own reward" -- William E. Davidsen

Close