full-disclosure - Re: Barracuda backdoor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 28 Apr 2011 19:18:59 +0300
From: Tõnu Samuel <tonu@....ee>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Barracuda backdoor

On Thu, 2011-04-28 at 12:09 -0400, Valdis.Kletnieks@...edu wrote:
> On Thu, 28 Apr 2011 13:09:14 +0300, =?ISO-8859-1?Q?T=F5nu_Samuel?= said:
> 
> > One day their Barracuda product stopped working.
> 
> OK... That's hardly surprising, given the high-quality software engineering
> that Barracuda is known for.. ;)
> 
> > Barracuda not only disabled all kind of subscription services but also
> > used some kind of backdoor in their products to disable product customer
> > had paid long time ago.
> 
> And I should believe this claim, why?
> 

Sue me. Sometime such claim is good enough because they will not sue me.
And if they do, this makes me happy. I got sued multiple times for what
I say in public and I never lost the case yet.

> Now the question is - given that *that* Barracuda was at least semi-functional
> even when off support, do we have any indication that your unit was in fact
> intentionally disabled?  It could very well be the symptoms you are seeing are
> the unit being just plain *broken*.

Yes I do have proofs, including Barracuda mails confirming it. There are
multiple of them including this one:

From: Chelsi Newland [mailto:cnewland@...racuda.com] 
Sent: Wednesday, April 27, 2011 5:51 PM
Subject: FW: Current (Expires 2011-11-21)
Importance: High

Please note we have proof of payment to you from the end user.  Either
reimburse this customer, or send payment for this order.

Please advise payment on your account so we can enable their unit. 

Sincerely,

Chelsi Newland| Barracuda Networks | Credit/Collections Manager

  Tõnu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/