Skip site navigation (1)Skip section navigation (2)
Date:      16 May 2002 14:41:39 +0930
From:      "Daniel O'Connor" <doconnor@gsoft.com.au>
To:        Terry Lambert <tlambert2@mindspring.com>
Cc:        Matthew Emmerton <matt@gsicomp.on.ca>, freebsd-chat@FreeBSD.ORG
Subject:   Re: national security backdoor in FreeBSD.
Message-ID:  <1021525918.3132.0.camel@chowder.gsoft.com.au>
In-Reply-To: <3CE33C1F.A547AE4D@mindspring.com>
References:  <3CE295EC.6030603@cogeco.ca> <009c01c1fc95$74fd0470$1200a8c0@gsicomp.on.ca>  <3CE33C1F.A547AE4D@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 2002-05-16 at 14:27, Terry Lambert wrote:
> > source.  So where do these binaries-with-no-source come from?  Oh, I know!
> > Carnivore detects FreeBSD ISO downloads, and tells the Magic Lantern
> > software on my ISP's servers to change the binaries inside the ISO images
> > that I FTP.  Makes perfect sense!
> 
> Bell Systems Technical Journal, July-August 1978, "On the Security
> of UNIX.", D. M. Ritchie.
> 
> They hacked the compiler to hack the passwd program when it was
> being compiled, and also to hack the compiler to include hacks
> to the compiler and the passwd program when the compiler itself
> was being compiled.

Chicken and egg.

If that was done then compiled code would have the same hole.

This is -chat material and thusly I have redirected it :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1021525918.3132.0.camel>