Full Disclosure: Re: Allegations regarding OpenBSD IPSEC

[Valdis.Kletnieks () vt edu]

On Wed, 15 Dec 2010 12:32:47 CST, Paul Schmehl said:
> So for 10 years IPSEC has had a backdoor in it and not one person examining 
> the code has noticed it?  Or even questioned it?
Debian/Ubuntu/etc SSL/SSH key vuln FTW.  That backdoor with a commit
message of 'shut up valgrind' managed to hide for 2 years before anybody
noticed what the effect was....

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/