[Info-vax] DECnet challenge

Stephen Hoffman seaohveh at hoffmanlabs.invalid
Fri Mar 1 19:35:40 EST 2019


On 2019-03-02 00:09:59 +0000, Dave Froble said:

> But to get back to the topic.  Going outside the challenge rules avoids 
> the challenge,  right?

Keep reading to the "ps".

And tightening the scope for a pentest or for a bug bounty program 
might only serve to prop up the appearance of and success of the 
defenders.

Looks good to management.  Until it doesn't.

Attackers don't care about scope, nor about code elegance, clarity, 
stability, nor maintainability.

> The only question I have is, how do I find out about switches that can 
> do what Mark suggests?  All I got are dumb $10 switches.

Prices on managed switches have generally cratered in recent years.

There are many to choose from.

I've been working with switches from various vendors.

The ZyXEL web-managed ("smart managed") switches are reasonable in 
terms of price and features and UI.  ZYWALL USG series boxes, too.

ZyXEL GS1920 series would be a starting point, for a low-end and 
capable semi-managed switch.

ZyXEL vendor support is decent, too.

Haven't had the opportunity to work with Ubiquiti switches, but their 
Wi-Fi AP products are quite good.


-- 
Pure Personal Opinion | HoffmanLabs LLC 




More information about the Info-vax mailing list