Developer responds to allegations of FBI backdoor in OpenBSD IPSec

Re:Developer responds to allegations of FBI backdoor in Open... by piotrSikora on Wednesday December 15, 2010 @11:19PM (#2011097)

Source?

[ Parent | on HN ]

Re:Developer responds to allegations of FBI backdoor in Open... by davidj on Thursday December 16, 2010 @06:24AM (#2011710)

http://www.cert.org/advisories/CA-2002-24.html I am still looking for the break-in that predates this breakin, my memory is fucking horrible. I apologize. It will take me a while for me to find it.

[ Parent | on HN ]

Re:Developer responds to allegations of FBI backdoor in Open... by piotrSikora on Friday December 17, 2010 @02:49AM (#2015580)

Thanks for the advisory, but you've got the facts wrong:

1) Main OpenBSD server wasn't compromised, main FTP server ("ftp.openbsd.org") was.

2) Source code (the one in CVS) wasn't compromised, only .tar.gz packages placed on the FTP server were.

3) They did want people to know about this, that's why they released security advisory [1].

On top of that, at the time "ftp.openbsd.org" wasn't even running OpenBSD, the FTP server was part of SunSITE powered by Solaris [2].

[1] http://marc.info/?l=openbsd-misc&m=102821528812161&w...

[2] http://www.openbsd.org/cgi-bin/cvsweb/www/faq/faq8.html.diff...

[ Parent | on HN ]

Re:Developer responds to allegations of FBI backdoor in Open... by davidj on Friday December 17, 2010 @03:52PM (#2017727)

This wasn't in 2002, this was back in the 90s, I want to say 1996 or 1997. The source code was back-doored. The advisory you found was for completely different break-in in 2002.

[ Parent | on HN ]

Re:Developer responds to allegations of FBI backdoor in Open... by piotrSikora on Saturday December 18, 2010 @07:42AM (#2019409)

I found? You linked to this incident in your previous comment.

[ Parent | on HN ]