Re: National security backdoor.

From: Colin B. (cbigam_at_somewhereelse.nucleus.com)
Date: 04/05/04


Date: Mon, 05 Apr 2004 20:35:26 GMT

Alan Coopersmith <alanc@alum.calberkeley.org> wrote:
> "Shampoo" <shamy@ptbo.igs.net> writes in comp.security.unix:
> |telnetd is infected with a national security backdoor in all non-source
> |compiled versions of FreeBSD, NetBSD and OpenBSD. If you download the
> |source code for telnetd and compile it to compare the file size of the
> |"stock" or "out of the box" version of telnetd versus the source-compiled
> |version - you will clearly see a difference - which is the backdoor.
>
> Well that's stupid of them - you'ld think someone in the vast
> consipiracy would have read Ken Thompson's Turing Award lecture and
> found better ways to hide their backdoors.

Indeed. If you can compile a clean version, it's a pretty poor backdoor.

Colin



Relevant Pages

  • Re: National security backdoor.
    ... |telnetd is infected with a national security backdoor in all non-source ... |source code for telnetd and compile it to compare the file size of the ... |version - you will clearly see a difference - which is the backdoor. ...
    (comp.security.unix)
  • Re: National Security Backdoor in telnetd - all versions.
    ... > Hello - This is an invitation to start a war against OS developers. ... > telnetd is infected with a national security backdoor in all non-source ... > source code for telnetd and compile it to compare the file size of the ... > The portmapper and most stock daemons in all OS's are infected if the ...
    (comp.security.unix)
  • Its a troll, guys, was Re: National security backdoor.
    ... > There is a backdoor that national security and other federal ... > telnetd is infected with a national security backdoor in all non- ... > download the source code for telnetd and compile it to compare the ...
    (comp.security.ssh)
  • Re: National security backdoor.
    ... Colin B. wrote: ... >>|source code for telnetd and compile it to compare the file size of the ... If you can compile a clean version, it's a pretty poor backdoor. ...
    (comp.security.unix)
  • ** Troll ** Re: National security backdoor.
    ... > compiled versions of FreeBSD, ... > source code for telnetd and compile it to compare the file size of the ...
    (comp.security.unix)