Juniper resets 'days since last rogue code incident' clock
Credit:
Juniper Networks has announced its own investigations have found none of the "oops ... how did that code get there" trouble in Junos OS and that it will kill off Dual Elliptic Curve (Dual_EC) encryption in ScreenOS.
The company says it hired a "respected security organization" that "undertook a detailed investigation of ScreenOS and Junos OS® source code."
"After a detailed review, there is no evidence of any other unauthorized code in ScreenOS nor have we found any evidence of unauthorized code in Junos OS. The investigation also confirmed that it would be much more difficult to insert the same type of unauthorized code in Junos OS."
