full-disclosure - Re: Barracuda backdoor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 28 Apr 2011 13:51:33 +0300
From: Tõnu Samuel <tonu@....ee>
To: Benji <me@...ji.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Barracuda backdoor

On Thu, 2011-04-28 at 11:45 +0100, Benji wrote:
> Do you actually have any evidence of a backdoor? Or could this just be
> a remote 'turn-off' switch as such? I'm not saying that one is better
> than the other, but they are very different features.

I have no idea how this technically is implemented or what they can do
else. This is clear example of closed source product dangers. Today we
found some "switch off", tomorrow what? How we can be sure about
anything? Only thing I am sure now: they kept copy of keys to house you
bought from them years ago and their used those keys for illegal thing.

  Tõnu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/