lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87y8xmerxj.fsf@deneb.enyo.de>
From: fw at deneb.enyo.de (Florian Weimer)
Subject: JAP back doored

"Drew Copley" <dcopley@...e.com> writes:

> Why is the state of Germany trojanizing applications which may be
> run by anyone on the planet?

Why is the U.S. government interfering with the publication of
security advisories if the corresponding software is being run
throughout the world?

The German government funds the AN.ON project, but allowed for a great
deal of independence.  Naturally, this independence does not extend to
the law, thanks to separation of powers.  Now a judge has forced the
operators to implement a surveillance interface, which is possible
because of a design weakness.  But that's just the beginning of the
legal process.  The project has announced that it plans to fight, but
within the legal system.

> How is it they believe they have a right to trojanize someone
> outside of Germany?

Nobody forces you to use the German service if you don't trust the
operators or (thanks to recent events) German law enforcement.

> This is blatantly illegal in just about every country outside of
> Germany.  Literally. 

No, it isn't.  Most countries with communication infrastructure have
laws that regulate law enforcement access.  This is not a "stupid
local law" issue.

Your country is eavesdropping foreign communication as well.

> Or, do they believe they are superior to other countries, and they may
> invade at will?

Please check the facts.  Germany doesn't an operate eavesdropping base
in the U.S., but the U.S. do in Germany.


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ