Slashdot Mirror

← Back to Stories (view on slashdot.org)

Linux Crypto Packages Demolished

Posted by simoniker on from the security-is-all-relative dept.

SiliconEntity writes "Cryptographer and security expert Peter Gutmann has demolished several Linux security software packages in a recent posting to the cryptography mailing list. He says, 'It's possible to create insecure 'security' products just as readily with open-source as with closed-source software. CIPE and vtun must be the OSS community's answer to Microsoft's PPTP implementation. What's even worse is that some of the flaws were pointed out nearly two years ago, but despite the hype about open-source products being quicker with security fixes, some of the protocols still haven't been fixed.'"

2 of 404 comments (clear)

  1. What a great Quote by G+Money · · Score: 5, Funny

    I wish I could make this my signature (damn 120 char limit):

    "Whenever someone thinks that they can replace SSL/SSH with something much better that they designed this morning over coffee, their computer speakers should generate some sort of penis-shaped sound wave and plunge it repeatedly into their skulls until they achieve enlightenment."
    --Peter Gutmann

  2. Use the trustworthy stuff by Anonymous Coward · · Score: 5, Funny

    I only use the Cyrillic Projector code. No one ever will crack that.