mailing list archives
RE: Popular Net anonymity service back-doored
From: "Drew Copley" <dcopley () eeye com>
Date: Thu, 21 Aug 2003 13:16:55 -0700
Conscience wise, their only absolution I could see is if one of them
leaked this information to the Usenet under an assumed name. If I was in
this situation, I would do that. Maybe they did. Otherwise, they should
have spoken up and risked jail. How can you so deceive people otherwise?
Patriotism or the cause has nothing to do with it. If the government
wants to hack their criminals, let them find their own security holes.
If they want to tap their own wires, let them work this out with their
own people. But, if they want to trojanize software secretly, software
which has an international userbase... This is illegal outside of their
German police have no jurisdiction in the US, for instance, just as the
US police have no jurisdiction in Germany -- apart from whatever
agreement Germany has made with the US regarding post-WWII treaties or
Still, I do not think anyone would be pleased if it was found that the
NSA backdoored a US product. How much moreso of a problem would this be
if local police backdoored a system such as this anonymity system?
This kind of crime sends a message to would be hackers. It says that it
is okay to hack if the end is justified. Hackers, you may not have
jurisdiction in Germany, but if you are hacking pedophiles or Neo-Nazis,
they are law breakers, so your means must be okay. Do people really want
this? Can anyone really be trusted with this? Wouldn't they hit the
wrong people and make all sorts of bad mistakes for which they would not
be held accountable for?
From: Andreas Kuntzagk [mailto:andreas.kuntzagk () mdc-berlin de]
Sent: Thursday, August 21, 2003 9:42 AM
To: bugtraq () securityfocus com
Subject: Re: Popular Net anonymity service back-doored
Am Don, 2003-08-21 um 06.56 schrieb Thomas C. Greene :
Popular Net anonymity service back-doored
Fed-up Feds get court order
Please see the news release of the AN.ON project:
"... Since it is not permissive to release information about
current proceedings according to German law, the project
partners did not inform the public at first. Based on the
fact that the developed software has been released in the
source code since the beginning of the Open Source Project,
also the implemented recording function was of course released. ..."