nanog mailing list archives

Re: [outages] More notes


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Tue, 8 Nov 2011 09:21:37 +0100

On Mon, Nov 07, 2011 at 08:37:55PM -0700,
 brian nikell <nickellman () gmail com> wrote 
 a message of 38 lines which said:

Actually, Juniper does disclose code bugs. Though not always to the
public at first, importantly to Juniper customers. Juniper had
advised all of their customers last August of this bug, however
Level3 chose to continue running it on their peer routers. Thus if
Level3 and its clue(full) management might have listened to their
operators & network engineers....

I disagree. The official bug statement from Juniper in August was
trying very hard to downplay the importance of the bug ("Given the
complexity of conditions required to trigger this issue, the
probability of exploiting this defect is extremely low"). No wonder so
few people (and not only at Level-3) did not upgrade.


Current thread: