Forever-day bugs

A nice piece of frightening securityspeak to conjure with: forever-day bugs, which are known bugs that the vendor has no intention of patching. These are often found in control systems, and are the sort of thing that Stuxnet exploited to attack the Iranian nuclear program. These controllers are also found on other kinds of industrial lines and, of course, in aircraft. "Forever day is a play on 'zero day,' a phrase used to classify vulnerabilities that come under attack before the responsible manufacturer has issued a patch. Also called iDays, or 'infinite days' by some researchers..." [Ars Technica]
Discuss

2 Responses to “Forever-day bugs”

  1. Tovaadz says:

    Whatsamatter Cory? You don’t like reading Rob’s posts? :)

  2. Jim Saul says:

    I can’t believe you’re just giving away the perfect book title.

    “Forever Day”

Leave a Reply