Re: [Full-disclosure] Allegations regarding OpenBSD IPSEC

[clément Game <clement@xxxxxxxxxxxxxxx>]

i second that...yet we obviously need to figure out better ways to audit the 
code...maybe some kind of security-oriented unit-test framework ? ( dont'know 
if it exists already, and if it does, maybe that it's already employed  for the 
OpenBSD project...dunno )

WintermeW

Le 15 déc. 2010 à 20:59, phil@xxxxxxxxx a écrit :

> In my own opinion, when the code hit the stable release, I doubt that
> after the code is audited at 100% unless someone add a new feature to that
> part or a bug is found in that code part. All that due to the complexity
> to understand the code, all that energy is better invested to make new
> features and to remove existing bug.
> 
> Thats why IMO for that disclosure. (to put the focust on that code part)
> 
> 
> 
> -phil
> 
>> --On December 14, 2010 8:40:14 PM -0500 bugs@xxxxxxxxxxx wrote:
>> 
>>> Hi,
>>> 
>>> Has anyone read this yet?
>>> 
>>> http://www.downspout.org/?q=node/3
>>> 
>>> Seems IPSEC might have a back door written into it by the FBI?
>>> 
>> 
>> So for 10 years IPSEC has had a backdoor in it and not one person
>> examining
>> the code has noticed it?  Or even questioned it?  That's a bit hard to
>> believe.  It's along the same lines as the stories that Microsoft captures
>> all your packets and harvests your personal information.
>> 
>> Read The Cathedral and The Bazaar.
>> 
>> --
>> Paul Schmehl, Senior Infosec Analyst
>> As if it wasn't already obvious, my opinions
>> are my own and not those of my employer.
>> *******************************************
>> "It is as useless to argue with those who have
>> renounced the use of reason as to administer
>> medication to the dead." Thomas Jefferson
>> "There are some ideas so wrong that only a very
>> intelligent person could believe in them." George Orwell
>> 
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/