full-disclosure - Allegations regarding OpenBSD IPSEC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 17 Dec 2010 12:47:38 +1100
From: paul.szabo@...ney.edu.au
To: full-disclosure@...ts.grok.org.uk
Subject: Allegations regarding OpenBSD IPSEC

Talking about hidden backdoors and how long until people notice in the
source. Maybe the backdoor is not in the source anymore, but has been
cleverly removed: please read

  Ken Thompson's 1984 Trusting Trust lecture
  http://cm.bell-labs.com/who/ken/trust.html

(I am not suggesting that any such thing has ever been done.)

Cheers, Paul

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/