Blaming the NSA for the incredibly poor quality of Cisco code is hardly fair. Cisco failed to implement stack cookies, ASLR, code review, or basically any sort of security protections on their firewalls! The bugs were there for the taking, and easily exploitable too. Lets lay blame where it belongs here — with Cisco’s shoddy code.
Completely Wrong
the grugq
683

To get the the place where offense is balanced by defense, the NSA’s IAD division should insist that US govt agencies not buy products that don’t incorporate anti-exploitation defenses.

On the whole, this would be far more valuable than