News for hackers. Stuff that matters.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by runjake on Tuesday December 14, 2010 @07:02PM (#2006338)
That's not what the claim is. The claim is that the FBI paid an engineer to do so. This seems entirely plausible, although I don't believe this case is true.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by tptacek on Tuesday December 14, 2010 @07:52PM (#2006508)
You think it's plausible that the largest law enforcement organization in the United States decided to insert cryptographic backdoors in critical security software used by many hundreds of companies... because they outsourced it to some random company?
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by drawkbox on Tuesday December 14, 2010 @09:35PM (#2006797)
If true...

They probably outsourced it to disconnect it from them, same as subcontractors doing things the state can't like operate drones on the border without massive outcry. Also it makes it less easy to pin on anyone at the agency/state and makes the individual(s) that put it in seem wacko if they stated that independently. You can just deny, deny, plausible deniability. It is easy to play the psychological reactions this way.

If the FBI, NSA, and others aren't doing stuff like this then I wonder how they are thinking they can hang with the Chinese, Russian, etc hackers of the state.

It's so funny, people believe in their own tribe/country that the authority would never do this but you think of it happening in China or Russia and you think, 'of course they are doing that!'. It is a problem of relativity/trust. Wikileaks put evidence of our very own State Department and Hilary Clinton bugging the United Nations but we aren't doing this across the internet/software landscape? hrm. Algorithms are hard to put trapdoors in, but the software that wraps them can help make it easier...

Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by tptacek on Tuesday December 14, 2010 @10:11PM (#2006887)
It has nothing to do with believing our government is incapable of it. It has to do with believing the FBI is incapable of it.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by runjake on Wednesday December 15, 2010 @12:29PM (#2008927)
Plausible? Entirely. Likely in this case? No.