full-disclosure - JAP back doored

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <001c01c368f2$3ce99060$2b02a8c0@dcopley>
From: dcopley at eeye.com (Drew Copley)
Subject: JAP back doored

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Florian Weimer [mailto:fw@...eb.enyo.de] 
> Sent: Friday, August 22, 2003 12:35 PM
> To: Drew Copley
> Cc: full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] JAP back doored
> 
> 
> "Drew Copley" <dcopley@...e.com> writes:
> 
> > If the US forces developers to trojanize their applications,
> 
> Like everywhere else, ISPs are forced to install wiretapping 
> equipment, which is basically the same.

In the US, criminals - not citizens - may be wiretapped at the ISP level. As far as I recall, they are generally tapped at the system level. That way they don't have to worry about - for instance - PGP passwords. But, in the US, even criminals have rights against their non-criminal activity being wiretapped. Tappers have to turn their wires off when they discuss non-criminal activity for a set amount of minutes.

Recourse against these kinds of things may found in popular cryptographic and anonymizing software. But, this recourse is now a dead end if it comes from Germany. 

Again, I am not bashing Germany, nor Germans. I just disagree that States should be able to trojanize applications and force the developers to keep silent about this. I do not care if it is Germany doing this or Romania. Who is the culpable party is unimportant.

If certain members of the US government felt this kind of activity was okay, I would be opposed to this. There is no shame in being critical of one's own government, nor of anyone else's... As long as that criticism is based on fact and inspired by pure motives.

Lastly, if this was not clear, innocent citizens are not criminals. Innocent citizens should not be tapped. In some nations they are allowed to be tapped. This is not the case in the US. 

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP0aHegkWkugjEnC3EQIfmwCguHg/VKi7RMDfzQOUFhAN7zGmukkAoPZi
h56Cp9ES/vl3H9M+aUpLtZIx
=zF0v
-----END PGP SIGNATURE-----