News for hackers. Stuff that matters.

A comment on Report of an NSA Employee about a Backdoor in the OpenSSH Daemon (2012) [pdf].

Re:Report of an NSA Employee about a Backdoor in the OpenSSH... by mappu on Saturday January 17, 2015 @06:06PM (#8905904)
On debian/ubuntu you can detect modified packages with `debsums` - but the signatures seem to be MD5, for which it's possible to generate collisions with e.g. something like http://www.bishopfox.com/resources/tools/other-free-tools/md... .
[ Parent | on HN ]
Re:Report of an NSA Employee about a Backdoor in the OpenSSH... by tedunangst on Saturday January 17, 2015 @06:12PM (#8905923)
With an unmodified `debsums`, of course.
[ Parent | on HN ]