full-disclosure - Re: Allegations regarding OpenBSD IPSEC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <77C4CE441445EA17B5C32831@utd71538.local>
Date: Fri, 17 Dec 2010 11:52:43 -0600
From: Paul Schmehl <pschmehl_lists@...rr.com>
To: Larry Seltzer <larry@...ryseltzer.com>, full-disclosure@...ts.grok.org.uk
Subject: Re: Allegations regarding OpenBSD IPSEC

--On December 17, 2010 12:31:37 PM -0500 Larry Seltzer 
<larry@...ryseltzer.com> wrote:

>> The one thing Mr. Perry has not done, and which, if his claims have any
>> merit at all, he could easily do, since he claims he's no longer under
> NDA,
>> is post the code that proves that there is a backdoor.  After all, he
>> supposedly wrote it, along with others.
>
> Actually, he did not say that he wrote code. He said that "Jason
> Wright and several other developers were responsible for those
> backdoors"
>

I quote Mr. Perry:

"I left NETSEC in 2000 to start another venture, I had
some fairly significant concerns with many aspects of these projects,
and I was the lead architect for the site-to-site VPN project
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
developed for Executive Office for United States Attorneys, which was
a statically keyed VPN system used at 235+ US Attorney locations and
which later proved to have been backdoored by the FBI so that they
could recover (potentially) grand jury information from various US
Attorney sites across the United States and abroad."

Still think he never wrote any and had no knowledge of the code?  What does 
"lead architect" mean?

-- 
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson
"There are some ideas so wrong that only a very
intelligent person could believe in them." George Orwell

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/