[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NSA software in Debian



Hi,

they don't need a real backdoor. They just need something that looks like a programming error. Possible buffer overflow,.... . Whether they themselves contributed the code or not, does not matter for them.

Franz




Bjoern Meier <bjoern.meier@gmail.com> schrieb:
hi,

2014/1/18 Marco Saller <marcosaller@yahoo.de>:
Hey there,

i am not sure if this question has been asked or answered yet, please do not mind if i would ask it again.
Is it possible that the NSA or other services included investigative software in some Debian packages?

Mit freundlichen Grüßen / Best Regards / 谨致问候

Marco Saller

if you let this conspiracy out, yes of course it is possible:
http://en.wikipedia.org/wiki/Security-Enhanced_Linux
You should always have in mind, that not only one has insight in the code.
Just the Firmware blobs, but I think this too way out of the
cost–benefit for the NSA.
But try it. Try to add a Backdoor or a "home telephone" in any of the
opensource software.
My guess: you get this thrown back on 80%.

Greetings,
Björn


--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: [🔎] CAGMPS54aifNK9Ye-e-Xn8bajaNQGEDXPms213LJw4BpQLedr_Q@mail.gmail.com">http://lists.debian.org/[🔎] CAGMPS54aifNK9Ye-e-Xn8bajaNQGEDXPms213LJw4BpQLedr_Q@mail.gmail.com



--
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.
Reply to: