p********n
发帖数: 2482 | 1 From: Gregory Perry
To: "d*****[email protected]"
Subject: OpenBSD Crypto Framework
Thread-Topic: OpenBSD Crypto Framework
Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
Date: Sat, 11 Dec 2010 23:55:25 +0000
Message-ID: <8**************************************[email protected]
.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Status: RO
Hello Theo,
Long time no talk. If you will recall, a while back I was the CTO at
NETSEC and arranged funding and donations for the OpenBSD Crypto
Framework. At that same time I also did some consulting for the FBI,
for their GSA Technical Support Center, which was a cryptologic
reverse engineering project aimed at backdooring and implementing key
escrow mechanisms for smart card and other hardware-based computing
technologies.
My NDA with the FBI has recently expired, and I wanted to make you
aware of the fact that the FBI implemented a number of backdoors and
side channel key leaking mechanisms into the OCF, for the express
purpose of monitoring the site to site VPN encryption system
implemented by EOUSA, the parent organization to the FBI. Jason
Wright and several other developers were responsible for those
backdoors, and you would be well advised to review any and all code
commits by Wright as well as the other developers he worked with
originating from NETSEC.
This is also probably the reason why you lost your DARPA funding, they
more than likely caught wind of the fact that those backdoors were
present and didn't want to create any derivative products based upon
the same.
This is also why several inside FBI folks have been recently
advocating the use of OpenBSD for VPN and firewalling implementations
in virtualized environments, for example Scott Lowe is a well
respected author in virtualization circles who also happens top be on
the FBI payroll, and who has also recently published several tutorials
for the use of OpenBSD VMs in enterprise VMware vSphere deployments.
Merry Christmas...
Gregory Perry
Chief Executive Officer
GoVirtual Education
"VMware Training Products & Services"
540-645-6955 x111 (local)
866-354-7369 x111 (toll free)
540-931-9099 (mobile)
877-648-0555 (fax) | c***c
发帖数: 21374 | 2 都是open source的，如何安装？
除非在编译版本安装了，然后到处推广这个编译版本，然后没有人自己编译 | d*b
发帖数: 21830 | 3 丫这个email的意思不是说这个软件有后门，FBI可以自由进去，丫的说，这个软件给第
三方软件开发提供了后门，包括vpn的某些trick, iptable的某些trick, 这个系统装了
比如email说的某些VPN软件后FBI就能进你的机器。
你懂了么？
【在 c***c 的大作中提到】
: 都是open source的，如何安装？
: 除非在编译版本安装了，然后到处推广这个编译版本，然后没有人自己编译
| i*******r
发帖数: 377 | 4 开源软件也可以有后门啊，例如取随机数，他完全可以改成读内存的某个特定位置的。
还有特定的地方故意用strcpy 替代strncpy,让远程溢出都有可能
还有著名的des加密算法都有nsa故意加的漏洞。。
【在 d*b 的大作中提到】
: 丫这个email的意思不是说这个软件有后门，FBI可以自由进去，丫的说，这个软件给第
: 三方软件开发提供了后门，包括vpn的某些trick, iptable的某些trick, 这个系统装了
: 比如email说的某些VPN软件后FBI就能进你的机器。
: 你懂了么？
| r****r
发帖数: 1839 | 5 这样的事情肯定有，每一个美国安全机构能染指的操作系统100%有后门。
exch021
【在 p********n 的大作中提到】
: From: Gregory Perry
: To: "d*****[email protected]"
: Subject: OpenBSD Crypto Framework
: Thread-Topic: OpenBSD Crypto Framework
: Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
: Date: Sat, 11 Dec 2010 23:55:25 +0000
: Message-ID: <8**************************************[email protected]
: .domain.local>
: Accept-Language: en-US
: Content-Language: en-US
|
|
