Re: National security backdoor.

From: Jon A. Solworth (solworth_at_RemoveThisNow.cs.uic.edu)
Date: 04/06/04 

Date: Mon, 05 Apr 2004 21:35:36 -0500

Colin B. wrote:
> Alan Coopersmith <alanc@alum.calberkeley.org> wrote:
>
>>"Shampoo" <shamy@ptbo.igs.net> writes in comp.security.unix:
>>|telnetd is infected with a national security backdoor in all non-source
>>|compiled versions of FreeBSD, NetBSD and OpenBSD. If you download the
>>|source code for telnetd and compile it to compare the file size of the
>>|"stock" or "out of the box" version of telnetd versus the source-compiled
>>|version - you will clearly see a difference - which is the backdoor.
>>
>>Well that's stupid of them - you'ld think someone in the vast
>>consipiracy would have read Ken Thompson's Turing Award lecture and
>>found better ways to hide their backdoors.
>
>
> Indeed. If you can compile a clean version, it's a pretty poor backdoor.
>
> Colin

Not to mention (well, I'm going to mention it), nobody uses telnet
anymore. For one thing, no back door is needed as it puts out passwords
in the clear on the network.

Jon

Relevant Pages

  • Re: National Security Backdoor in telnetd - all versions.
    ... > Hello - This is an invitation to start a war against OS developers. ... > telnetd is infected with a national security backdoor in all non-source ... > source code for telnetd and compile it to compare the file size of the ... > The portmapper and most stock daemons in all OS's are infected if the ...
    (comp.security.unix)
  • Re: National security backdoor.
    ... |telnetd is infected with a national security backdoor in all non-source ... |source code for telnetd and compile it to compare the file size of the ... |version - you will clearly see a difference - which is the backdoor. ...
    (comp.security.unix)
  • Re: Delphi 2007 so far...
    ... Colin wrote: ... improvements everywhere - Vista support, the Ajax stuff, improved ... Have you been able to get Virtual Treeview to compile via the IDE? ...
    (borland.public.delphi.non-technical)
  • Re: National security backdoor.
    ... > |telnetd is infected with a national security backdoor in all non-source ... If you download the ... If you can compile a clean version, it's a pretty poor backdoor. ...
    (comp.security.unix)
  • Re: Stats comp.os.linux.networking (last 7 days)
    ... In comp.os.linux.networking colin. ... > Could you please tell me what application you use to compile these stats? ... Michael Heiming ...
    (comp.os.linux.networking)