[133650] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Alleged backdoor in OpenBSD's IPSEC implementation.

daemon@ATHENA.MIT.EDU (mikea)
Wed Dec 15 08:28:27 2010

Date: Wed, 15 Dec 2010 07:28:09 -0600
From: mikea <mikea@mikea.ath.cx>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <B8E4A410-F6D9-4EAC-BB2B-7FCCA4A9B019@kapu.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Tue, Dec 14, 2010 at 11:51:24PM -0800, Michael J Wise wrote:
> On Dec 14, 2010, at 9:56 PM, Ken Chase wrote:
> > On Tue, Dec 14, 2010 at 09:39:02PM -0800, Chaim Rieger said:
> >> Does anyone remember the last time a law enforcement agency had
> >> someone sign a 10 year NDA on a backdoor?
> >> 
> >> "Oh, times up, I can post it on Facebook now.  Cool."
> > 
> > 22:42 <@smartboy> curious what the guy's motives really are.  pretty sure the 
> >                  NDA expiration on putting a backdoor into software for the 
> >                  FBI would be "when you're dead"
> > 22:42 <@smartboy> or "when you'd like to be dead"
> 
> Someone is confusing FBI with NSA, methinks. And yes, if this is
> the kind of thing not talked about, "NDA"s expire when you do. But
> seriously ... this would seem to be the kind of code that Smart People
> should be doing security audits on Just Because.
>
> So rustle up a couple of PostDocs, and give them an idea for a Thesis,
> and yer set.

More to the point, I think it wouldn't be an NDA, but a security
classification on the knowledge of the backdoors, and probably one not
subject to automatic downgrading.

-- 
Mike Andrews, W5EGO
mikea@mikea.ath.cx
Tired old sysadmin 


home help back first fref pref prev next nref lref last post