News for hackers. Stuff that matters.

A comment on Report of an NSA Employee about a Backdoor in the OpenSSH Daemon (2012) [pdf].

Re:Report of an NSA Employee about a Backdoor in the OpenSSH... by dorafmon on Saturday January 17, 2015 @07:26PM (#8906116)
If they developed an alternative version of OpenSSH with backdoor how can they distribute it so that people will actually use it?
[ Parent | on HN ]
Re:Report of an NSA Employee about a Backdoor in the OpenSSH... by manicdee on Saturday January 17, 2015 @10:31PM (#8906500)
Crowbar attack versus the distribution maintainer.

Physical access to the target's system.

Control the network upstream of the target so that the modified checksum and package can be delivered during package upgrades.

Compromise the mirror used by the target to provide the modified checksum and package.

Hide the code changes in a series of semi-related ostensibly legitimate pull requests. Legitimise your pull requests by developing corner cases which expose "bugs" in the software you wish to attack.

Crowbar attack against the upstream maintainer.

"USB key in the carpark" attack.

Those are some ideas. I don't claim to be an expert in the area.

[ Parent | on HN ]