nanog mailing list archives

Re: Alleged backdoor in OpenBSD's IPSEC implementation.


From: mikea <mikea () mikea ath cx>
Date: Wed, 15 Dec 2010 07:28:09 -0600

On Tue, Dec 14, 2010 at 11:51:24PM -0800, Michael J Wise wrote:
On Dec 14, 2010, at 9:56 PM, Ken Chase wrote:
On Tue, Dec 14, 2010 at 09:39:02PM -0800, Chaim Rieger said:
Does anyone remember the last time a law enforcement agency had
someone sign a 10 year NDA on a backdoor?

"Oh, times up, I can post it on Facebook now.  Cool."

22:42 <@smartboy> curious what the guy's motives really are.  pretty sure the 
                 NDA expiration on putting a backdoor into software for the 
                 FBI would be "when you're dead"
22:42 <@smartboy> or "when you'd like to be dead"

Someone is confusing FBI with NSA, methinks. And yes, if this is
the kind of thing not talked about, "NDA"s expire when you do. But
seriously ... this would seem to be the kind of code that Smart People
should be doing security audits on Just Because.

So rustle up a couple of PostDocs, and give them an idea for a Thesis,
and yer set.

More to the point, I think it wouldn't be an NDA, but a security
classification on the knowledge of the backdoors, and probably one not
subject to automatic downgrading.

-- 
Mike Andrews, W5EGO
mikea () mikea ath cx
Tired old sysadmin 


Current thread: