Full Disclosure mailing list archives
Re: Popular Net anonymity service back-doored
From: Barney Wolff <barney () databus com>
Date: Thu, 21 Aug 2003 19:09:14 -0400
On Thu, Aug 21, 2003 at 02:41:33PM -0700, Aron Nimzovitch wrote:
Only a fool would blindly depend on someone else's software to gain anonymity without examining the code. If you need anonymity, then you should easily be willing to invest sweat equity, or have a contractual arrangement when the threat is only financial. For more serious threats requiring anonymity, not reviewing the source when it is available seems beyond stupid. I could unserstand your ire if you were one of our clients, but this was a free service wasn't it?
Examination of the code is all very well, but what assurance did you ever have that the source code released was identical to what was actually running on the server? Or that their compiler or libraries hadn't been trojaned? -- Barney Wolff http://www.databus.com/bwresume.pdf I'm available by contract or FT, in the NYC metro area or via the 'Net. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Popular Net anonymity service back-doored Florian Weimer (Aug 21)
- RE: Re: Popular Net anonymity service back-doored Drew Copley (Aug 21)
- Re: Re: Popular Net anonymity service back-doored Florian Weimer (Aug 21)
- Re: Popular Net anonymity service back-doored Thomas C. Greene (Aug 21)
- Re: Popular Net anonymity service back-doored Aron Nimzovitch (Aug 21)
- Re: Popular Net anonymity service back-doored Barney Wolff (Aug 21)
- RE: Popular Net anonymity service back-doored David Schwartz (Aug 21)
- RE: Popular Net anonymity service back-doored Drew Copley (Aug 22)
- Re: RE: Popular Net anonymity service back-doored felix . roennebeck (Aug 22)
- Re: Popular Net anonymity service back-doored Bernhard Kuemel (Aug 24)
- Re: Re: Popular Net anonymity service back-doored Dave Howe (Aug 27)
- Re: Popular Net anonymity service back-doored Aron Nimzovitch (Aug 21)
- RE: Re: Popular Net anonymity service back-doored Drew Copley (Aug 21)
- Re: Popular Net anonymity service back-doored Alex Russell (Aug 21)
- Re: Popular Net anonymity service back-doored Michael Schlenker (Aug 22)
- Re: Popular Net anonymity service back-doored nordi (Aug 22)
- Re: Popular Net anonymity service back-doored Alex Russell (Aug 22)
- <Possible follow-ups>
- RE: Popular Net anonymity service back-doored David Schwartz (Aug 22)