From owner-freebsd-security@FreeBSD.ORG Fri Feb 20 22:12:58 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6477687C for ; Fri, 20 Feb 2015 22:12:58 +0000 (UTC) Received: from mail-ob0-x22e.google.com (mail-ob0-x22e.google.com [IPv6:2607:f8b0:4003:c01::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 20EF01DA for ; Fri, 20 Feb 2015 22:12:58 +0000 (UTC) Received: by mail-ob0-f174.google.com with SMTP id wo20so26691223obc.5 for ; Fri, 20 Feb 2015 14:12:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=MDf1AEiFGHCPYKWr/uh4kl2/+AC7tciSnK4f2sBemEk=; b=xUtPjjQLH6cr+g+TnYss48nmXPngrxIEu8PAFyKLRdI52Eo6/uBf6GaxoVUQvFU1s4 Q/6wCpSJTomstQRC8qA5UQxWzcGLivfN/4ygfPuV4wrpgSJPEaWfs0nbSk2RBqLpBo/f ASKVbbfXzHqKYzviTNGAIzXeO91Npsvvy8qoQ3zVmPCUbVcvMy1bpzE9HkPea7YGi15Y asgpi62l0Ja1LWkLvVjPYVE0GoJaDyEdGeD/5iNvQXPpqzosLIW+4eAXfyInqeCN0+Yu Ho+udT8ZqWCupLVidO6pZ5sVsH6I3QbPMwTecYesFGu/iy86ogWwFl0JRf9d+yRvE01o yAhw== MIME-Version: 1.0 X-Received: by 10.182.128.199 with SMTP id nq7mr1045586obb.47.1424470377561; Fri, 20 Feb 2015 14:12:57 -0800 (PST) Received: by 10.60.140.199 with HTTP; Fri, 20 Feb 2015 14:12:57 -0800 (PST) In-Reply-To: References: <54E2B04C.9080707@av8n.com> <54E436FB.9000709@deadhat.com> Date: Fri, 20 Feb 2015 17:12:57 -0500 Message-ID: Subject: Re: [Cryptography] trojans in the firmware From: grarpamp To: freebsd-security@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Mailman-Approved-At: Fri, 20 Feb 2015 22:25:38 +0000 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Feb 2015 22:12:58 -0000 On Fri, Feb 20, 2015 at 4:50 PM, grarpamp wrote: > These for starters, then all the public hacker malware versions of > the same thing both extant and coming... Note the explicit references to FreeBSD and UFS in those links. Linux and EXT FS as well. These OS are not immune to 0-day and other exploits. Multiple defenses are always useful..