Re: NSA software in Debian

I would expect it to be root kit of some form, most likely to dwell in a non-free repo.

On Sat, Jan 18, 2014 at 3:14 PM, Kevin Olbrich <kolbrich@dolphin-it.de> wrote:

Hello,

This is a chance of 1 in 5.
I think there are ways we would never imagine yet. Just think of such a possibility in qt and there would be thousands of zombie apps.

Mit freundlichen Grüßen / best regards,
Kevin Olbrich.

(mobil vom iPhone)

--
Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und/oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet.

> Am 18.01.2014 um 20:39 schrieb Bjoern Meier <bjoern.meier@gmail.com>:

>
> hi,
>
> 2014/1/18 Marco Saller <marcosaller@yahoo.de>:
>> Hey there,
>>

>> i am not sure if this question has been asked or answered yet, please do not mind if i would ask it again.
>> Is it possible that the NSA or other services included investigative software in some Debian packages?
>>

>> Mit freundlichen Grüßen / Best Regards / 谨致问候
>>
>> Marco Saller
>
> if you let this conspiracy out, yes of course it is possible:
> http://en.wikipedia.org/wiki/Security-Enhanced_Linux
> You should always have in mind, that not only one has insight in the code.
> Just the Firmware blobs, but I think this too way out of the
> cost–benefit for the NSA.
> But try it. Try to add a Backdoor or a "home telephone" in any of the
> opensource software.
> My guess: you get this thrown back on 80%.
>
> Greetings,
> Björn
>
>

> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

> Archive: [🔎] CAGMPS54aifNK9Ye-e-Xn8bajaNQGEDXPms213LJw4BpQLedr_Q@mail.gmail.com" target="_blank">http://lists.debian.org/[🔎] CAGMPS54aifNK9Ye-e-Xn8bajaNQGEDXPms213LJw4BpQLedr_Q@mail.gmail.com

>

--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: [🔎] 1FF28D18-7EDD-45CB-BCC6-D72171936A29@dolphin-it.de" target="_blank">http://lists.debian.org/[🔎] 1FF28D18-7EDD-45CB-BCC6-D72171936A29@dolphin-it.de