News for hackers. Stuff that matters.
Re:A Chapter from the FBI's History with OpenBSD and an Open... by wil421 on Sunday July 21, 2019 @07:37AM (#20490891)
The link in the tweet is worth a read[1].

>My NDA with the FBI has recently expired, and I wanted to make you aware of the fact that the FBI implemented a number of backdoors and side channel key leaking mechanisms into the OCF, for the express purpose of monitoring the site to site VPN encryption system implemented by EOUSA, the parent organization to the FBI. Jason Wright and several other developers were responsible for those backdoors, and you would be well advised to review any and all code commits by Wright as well as the other developers he worked with originating from NETSEC.

[1]https://marc.info/?l=openbsd-tech&m=129236621626462

Re:A Chapter from the FBI's History with OpenBSD and an Open... by ProCicero on Sunday July 21, 2019 @08:22AM (#20491034)
Nitpicking here, but the parent agency of the FBI is the Department of Justice. The EOUSA is the Executive Office of United States Attorneys, and is basically the back office support for the 93 US Attorney offices. It's parent organization is also the Department of Justice.

Basically, he is saying the DOJ planted a back door so that it could spy on its own internal network.

Re:A Chapter from the FBI's History with OpenBSD and an Open... by wil421 on Sunday July 21, 2019 @02:46PM (#20492952)
I was confused by this and it’s the first time I’ve heard of EOUSA.

What’s the real story here?

Re:A Chapter from the FBI's History with OpenBSD and an Open... by equalunique on Sunday July 21, 2019 @10:23PM (#20494967)
Factions in government are sometimes caught spying on gov organizations that have oversight/control athority over them. That was the real scandal of Edward Snowden's bombshell (that was quickly covered up).
Re:A Chapter from the FBI's History with OpenBSD and an Open... by matthewbauer on Sunday July 21, 2019 @12:12PM (#20491998)
Re:A Chapter from the FBI's History with OpenBSD and an Open... by ProCicero on Sunday July 21, 2019 @12:25PM (#20492060)
That makes sense. There really is no reason the FBI would ever need backdoor access to EOUSA, let alone compromise open source VPN software in order to get it. There are much easier ways for them to get what they want.
Re:A Chapter from the FBI's History with OpenBSD and an Open... by Tharkun on Sunday July 21, 2019 @11:55AM (#20491886)
> This is also probably the reason why you lost your DARPA funding

I remember this causing a huge stink at the time, with various petty reasons as the alleged cause (like Theo's less-than-friendly communication style).

Re:A Chapter from the FBI's History with OpenBSD and an Open... by Fnoord on Sunday July 21, 2019 @03:33PM (#20493200)
The quote from Theo being

> I actually am fairly uncomfortable about it, even if our firm stipulation was that they cannot tell us what to do. We are simply doing what we do anyways — securing software — and they have no say in the matter. I try to convince myself that our grant means a half of a cruise missile doesn't get built.

I don't have a date at hand but it was around the time of the war in Iraq.

A while after the quote was made (IIRC in a newspaper) the DARPA funding was cut.

Re:A Chapter from the FBI's History with OpenBSD and an Open... by tinus_hn on Sunday July 21, 2019 @09:01AM (#20491139)
That’s almost 10 years ago. Was the backdoor ever found?
Re:A Chapter from the FBI's History with OpenBSD and an Open... by tptacek on Sunday July 21, 2019 @10:51AM (#20491548)
No.
Re:A Chapter from the FBI's History with OpenBSD and an Open... by StreamBright on Sunday July 21, 2019 @01:58PM (#20492645)
I am not sure id the implications.

a, there is nothing there to be found

b, being opensource is not enough to find security related bugs and backdoors

c, ?

Re:A Chapter from the FBI's History with OpenBSD and an Open... by sslalready on Sunday July 21, 2019 @07:27PM (#20494352)
Several people have looked into the issue over the years but so far no traces of malicious intent have been found.
Re:A Chapter from the FBI's History with OpenBSD and an Open... by kilo_bravo_3 on Monday July 22, 2019 @11:29AM (#20498928)
FBI NDAs never expire...