If the firewall of a company lets UDP traffic in and out from any computer, then I guess this device would be the least of their concern...
On the other hand if the code on the device is written in C and if there is a buffer overflow or some other bug in there, then it becomes a great way to open up home networks to malicious attackers.
Posted Dec 21, 2009 12:06 UTC (Mon) by robbe (guest, #16131)
[Link]
Many (mostly small) companies deploy the simple allow-everything-outbound
rule. AFAIK the pogoplug will initiate the "connection", and therefore
work happily with these setups.
Of course this is also true for most P2P and assorted malware, with the
difference that pogoplug is not using sneaky techniques (tunneling over
http, https, dns, whatever).