| 2004 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | |
| 2006 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Oct | Oct | |
| 2007 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2007 |
| 2008 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2008 |
| 2009 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2009 |
| 2010 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2010 |
| 2011 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2011 |
| 2012 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2012 |
| 2013 | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | 2013 |
Wed 15th Dec 00:39 2010: Allegations regarding OpenBSD IPSEC
http://marc.info/?l=openbsd-tech&m=129236621626462&w=2 is a post from Theo De Raadt, the main OpenBSD developer (OpenBSD's claim to fame is that it has had Only two remote holes in the default install). The email alleges that the IPSEC (IP Security) stack in OpenBSD includes some back-door(s) knowingly inserted by the US FBI. The confessor's NDA with the FBI has recently expired, which apparently allows him to confess the subversion. If so, that differs from my understanding of the UK Official Secrets Act, but so be it. He has alleged, on the OpenBSD mailing list, that
"the FBI implemented a number of backdoors and side channel key leaking mechanisms into the OCF, for the express
purpose of monitoring the site to site VPN encryption system
implemented by EOUSA, the parent organization to the FBI. Jason
Wright and several other developers were responsible for those
backdoors, and you would be well advised to review any and all code
commits by Wright as well as the other developers he worked with
originating from NETSEC."
This is very serious stuff, as OpenBSD is largely treated as being the most trustworthy firewall OS available.
Comments for 'Allegations regarding OpenBSD IPSEC'
You could post a comment if you were logged in.
You are logged in as 0
Steve's urandom blog
