Date: Wed, 15 Dec 2010 09:38:48 -0800 From: Rob Farmer <rfarmer@predatorlabs.net> To: bf1783@gmail.com Cc: freebsd-security@freebsd.org, Garrett Wollman <wollman@bimajority.org> Subject: Re: Allegations regarding OpenBSD IPSEC Message-ID: <AANLkTiky7GAJba_T4Ry3T%2BURi-O4uynstjw4TtU04kOx@mail.gmail.com> In-Reply-To: <AANLkTi=J%2Bw1ev6=x3eUP8nQy6fVWw_cyf=nP=zD8TnOd@mail.gmail.com> References: <4d08a854.w8rPywliRhHs/MXH%akosela@andykosela.com> <AANLkTin8B44S5Nbz7SOK=muiH2xB4eXv33zzJdxfmPRN@mail.gmail.com> <19720.57471.684530.72355@hergotha.csail.mit.edu> <AANLkTind3UU%2BNbJeF6-nKrcZgUV6aEY93cwtWuO1yVFV@mail.gmail.com> <AANLkTi=J%2Bw1ev6=x3eUP8nQy6fVWw_cyf=nP=zD8TnOd@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 15, 2010 at 08:24, b. f. <bf1783@googlemail.com> wrote: > I don't think that your reasoning about the government's willingness > to release this information, or the extent to which this is a partisan > issue, is correct. Well, the NSA wiretap thing was leaked only a couple years after it started. If you want to believe that *nobody* in Washington, through several election cycles and a change in majority party, would be interested in exposing this for political (or financial, in the case of the media) gain and his "NDA" accidentally timed out or whatever, feel free. > But the details of who was involved, and what > agreements were in place, are secondary to the issue of whether there > are vulnerabilities, intentional or otherwise, in the code. =A0For those > who have the time and ability to audit the code, there are some > possible problems to look for: > > http://marc.info/?l=3Dopenbsd-tech&m=3D129237675106730&w=3D2 > > b. > They won't be secondary if someone does find a minor bug in the network stack (regardless who introduced it or if it is even related), which will probably happen given the attention this will invariably receive. --=20 Rob Farmer
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTiky7GAJba_T4Ry3T%2BURi-O4uynstjw4TtU04kOx>