It looks like you're using an Ad Blocker.
Please white-list or disable AboveTopSecret.com in your ad-blocking tool.
Some features of ATS will be disabled while you continue to use an ad-blocker.
You might not have heard of OpenBSD, but the free operating system is at the root of many computers and virtual private networks worldwide. So too is the FBI — that is, if you believe a new accusation that surfaced on a public OpenBSD mailing list.
Theo de Raadt, founder of OpenBSD, forwarded an emailed accusation that the FBI tampered with OpenBSD’s Internet protocol security code around 2000 to 2001.
Allegations regarding OpenBSD IPSEC
...At that same time I also did some consulting for the FBI,
for their GSA Technical Support Center, which was a cryptologic
reverse engineering project aimed at backdooring and implementing key
escrow mechanisms for smart card and other hardware-based computing
My NDA with the FBI has recently expired, and I wanted to make you
aware of the fact that the FBI implemented a number of backdoors and
side channel key leaking mechanisms into the OCF, for the express
purpose of monitoring the site to site VPN encryption system
implemented by EOUSA, the parent organization to the FBI...
...One project Perry worked on, a virtual private network (VPN) system used by the U.S. Department of Justice "later proved to have been backdoored by the FBI so that they could recover (potentially) grand jury information from various US Attorney sites across the United States and abroad," Perry said.
An FBI spokesman was unable to comment on the matter.
Perry said he sent the e-mail to de Raadt because his non-disclosure agreement with the FBI had expired.
Perhaps the most remarkable thing about the whole matter is that de Raadt decided to go public with claims that could undermine the credibility of his software. OpenBSD is open source software and its components are widely used in other Unix-based operating systems...
Storm over OpenBSD back door
...This has been vehemently denied by Lowe in his own blog and he pointed out that there's another tech author called Scott Lowe. This Lowe, who works for a college in Missouri, is keeping his own counsel for the moment...
Allegations Regarding FBI Involvement with OpenBSD
Let’s get right to the point and set the record straight: I am not, nor have I ever been, affiliated with or employed by the FBI or any other government agency.
Clarification regarding FBI conspiracy discussion
As is the case with the “other” Scott Lowe, I am not, nor have I ever been, affiliated with or employed by the FBI or any other government agency.
..Strong stuff, naming names, very unusual, likely to lead to professional suicide. Smells like a hoax or a competitor smear. We wrote last night the alleged author of the allegations for confirmation but have not received an answer...
Originally posted by Skada
reply to post by JacKatMtn
Of course they paid programmers to put back doors into the software. The Government paid other programmers to place backdoor vote rigging code in the Diebold voting machines. I would not be surprised if the government asked Micro$oft to either monitor all Windows OS PCs, or gave the government the 'keys' to the back- and/or front-doors to spy on everyone.
At first this sounds great: if an owner loses a laptop it can be remotely disabled to ensure no sensitive data is compromised. But essentially we are giving up control of our computers and putting that control in another’s hands.
Originally posted by digit78
"If" this is confirmed, this is "huge" news and will have big impact.
The openssl coded concerned here, have been widely used in many other softwares.
But we need other confirmation than the original leaker of this information.
FYI, the guy who leaked this info is old CEO of the NetSec company, and a fbi consultant.
He have emailed this info "now", to the main developper of OpenBSD, because his 10 Years of "privacy" contract have ended few days ago.
I will follow this news closely ..
Originally posted by digit78
On twitter (here) : via @ejhilbert : I was one of the few FBI cyber agents when the coding supposedly happened. Experiment yes. Success No.
...The OCF was a target for side channel key leaking mechanisms, as well as pf (the stateful inspection packet filter), in addition to the gigabit Ethernet driver stack for the OpenBSD operating system; all of those projects NETSEC donated engineers and equipment for, including the first revision of the OCF hardware acceleration framework based on the HiFN line of crypto accelerators.
The project involved was the GSA Technical Support Center, a circa 1999 joint research and development project between the FBI and the NSA; the technologies we developed were Multi Level Security controls for case collaboration between the NSA and the FBI due to the Posse Commitatus Act, although in reality those controls were only there for show as the intended facility did in fact host both FBI and NSA in the same building...