FBI Alleged To Have Backdoored OpenBSD's IPSEC Stack

Aggrajag and Mortimer.CA, among others, wrote to inform us that Theo de Raadt has made public an email sent to him by Gregory Perry, who worked on the OpenBSD crypto framework a decade ago. The claim is that the FBI paid contractors to insert backdoors into OpenBSD's IPSEC stack. Mr. Perry is coming forward now that his NDA with the FBI has expired. The code was originally added ten years ago, and over that time has changed quite a bit, "so it is unclear what the true impact of these allegations are" says Mr. de Raadt. He added: "Since we had the first IPSEC stack available for free, large parts of the code are now found in many other projects/products." (Freeswan and Openswan are not based on this code.)

Comments

Hide yo keys, hide yo passwords

[Anonymous Coward]

They be backdooring everybody out there

Re:Hide yo keys, hide yo passwords

[Soilworker]

They be backdooring everybody out there

You don't have to come and confess, we're looking for you, we gonna find you.

Re:Hide yo keys, hide yo passwords

[iCEBaLM]

'Deys combin' through ur net-dumps,
'Deys snatchin ur packets up,
Tryin' ta read 'em so y'all need ta,
Hide yo' keys, hide yo' crypts,
Hide yo' keys, hide yo' crypts,
Hide yo' keys, hide yo' crypts,
An' hide yo' passwords cause they backdoorin' everybody out here.

You don't have to come an' confess, we lookin' for you,
We gon find you,
We gon find you.
So we can run and check DAT,
Run and check DAT,
Run and check DAT,
Homeboy, home-home, homeboy.

We got your source code and you left timestamps and all,
You are so dumb,
You are really dumb, fo' real.
I was attacked by the NSA on black projects.
So dumb, so dumb, so dumb, so.

'Deys combin' through ur net-dumps,
'Deys snatchin ur packets up,
Tryin' ta read 'em so y'all need ta,
Hide yo' keys, hide yo' crypts,
Hide yo' keys, hide yo' crypts,
Hide yo' keys, hide yo' crypts,
An' hide yo' passwords cause they backdoorin' everybody out here.

You don't have to come an' confess, we lookin' for you,
We gon find you,
We gon find you.
So we can run and check DAT,
Run and check DAT,
Run and check DAT,
Homeboy, home-home, homeboy.

Oh shit...

[Anonymous Coward]

I hope all three system admins still using OpenBSD have been notified.

Re:Oh shit...

[Delarth799]

Well they would have been notified sooner but the clouds kept interfering with our smoke signals.

Re:Oh shit...

[Frank T. Lofaro Jr.]

My brother and I have OpenBSD boxes as our firewalls and site-to-site VPNs between our houses.
Who is the third person?

The FBI guy of course.

All Hail !

[Anonymous Coward]

I for one welcome our FBI Hacker Overlords !

God Bless thy Holy Christian Empire ! HOO RA !

Re:But has it been confirmed?

[InlawBiker]

Shit, I just found it. How'd we miss this before?

        if (Password == "JOSHUA")
        {
                printf("Greetings Professor Falken");
                godmode = true;
                return;
            }

So Sycraft-fu

[Anonymous Squonk]

Are you ready to buy into the government conspiracy theories now?

Re:But but but

[Anonymous Coward]

i do. great film.

Re:But but but

[The Wild Norseman]

mQCPAzfTdH0AAAEEALqOFf7jzRYPtHz5PitNhCYVryPwZZJk2B7cNaJ9OqRQiQoi
  e1YdpAH/OQh3HSQ/butPnjUZdukPB/0izQmczXHoW5f1Q5rbFy0y1xy2bCbFsYij
  4ReQ7QHrMb8nvGZ7OW/YKDCX2LOGnMdRGjSW6CmjK7rW0veqfoypgF1RaC0fABEB
  AAG0LU5TQSdzIE1pY3Jvc29mdCBDQVBJIGtleSA8cG9zdG1hc3RlckBuc2EuZ292
  PokBFQMFEDfTdJE+e8qoKLJFUQEBHnsH/ihUe7oq6DhU1dJjvXWcYw6p1iW+0euR
  YfZjwpzPotQ8m5rC7FrJDUbgqQjoFDr++zN9kD9bjNPVUx/ZjCvSFTNu/5X1qn1r
  it7IHU/6Aem1h4Bs6KE5MPpjKRxRkqQjbW4f0cgXg6+LV+V9cNMylZHRef3PZCQa
  5DOI5crQ0IWyjQCt9br07BL9C3X5WHNNRsRIr9WiVfPK8eyxhNYl/NiH2GzXYbNe
  UWjaS2KuJNVvozjxGymcnNTwJltZK4RLZxo05FW2InJbtEfMc+m823vVltm9l/f+
  n2iYBAaDs6I/0v2AcVKNy19Cjncc3wQZkaiIYqfPZL19kT8vDNGi9uE=

Goddammit. Now I'm gonna have to change my Slashdot password.

Hmmm kinda reminds me of ...

[Shadowlore]

Garibaldi: Think they'll ever find that transmitter you slipped G'Kar?
Sinclair: No. because there isn't one.
Garibaldi: There isn't? Wait—
Sinclair: I lied. I figured if there were a transmitter, sooner or later they'd find it and remove it. But if I just told them there was, they'd keep looking. Indefinitely.
Garibaldi: Commander, do you have any idea of the tests they'll put him through, the things they'll do to him trying to find a transmitter that's not there?
Sinclair: Yes.