Among the topics discussed today is Wandera, which reports that major airlines are vulnerable to a flaw in the registration system, and Dell EMC is at the cutting edge of open networking.
On 6 February, security firm Wandera announced that it has discovered a flight registration vulnerability affecting many airlines, including Southwest, Air France, KLM, Vueling, Jetstar, Thomas Cook, Transavia and Air Europa.
The flaw is relatively simple, as airlines have sent unencrypted registration links to passengers. Since the links are not encrypted, they could be intercepted or reused by an unauthorized third party to change the details of a reservation and access user information.
According to Michael Covington, vice president of products at Wandera, the company discovered that data including "suspicious parameters on a URL string was actually used to authenticate the user in a transparent way on the website. electronic ticketing ".
Covington said that by not limiting the URLs for the registration of electronic tickets to a single use, airlines were opening up their electronic ticketing systems to a replay attack allowing an attacker to easily access to the passenger accounts.
Dell EMC officials envision the corporate campus and other peripheral environments as next steps in the company's five-year-old open networking efforts, which, up to the end this year focused mainly on central data centers.
Tom Burns, senior vice president and general manager of Dell EMC Network Operations and Solutions, said last week that the software-defined WAN space and 5G network deployments by service providers would provide Dell EMC with the opportunity to extend the reach of its open network. systems and software.
He says the move to the SD-WAN arena will accompany what he calls "major updates to [Dell EMC’s] campus portfolio planned for 2019. "Deployment by 5G network service providers in the months and years to come will give them the opportunity to use" versatile resources close to the edge and l & # 39; use of software to deploy specific services as needed ".