I just picked this up from a friend at the FSFE.
Apparently, someone who was working with the FBI a few years ago alleges that he came across information regarding backdoors that had been inserted into the IPSEC stack.
I know, that this is technical but it comes down to the fact that the FBI can snoop on “secure communications” that are encrypted using the NetBSD IPSEC stack. Now is the time for a code review, especially as it appears that the FBI have apparently been pushing use of the allegedly backdoored stack for firewalls and VPN tunnels.
The email that details this is linked below:
http://marc.info/?l=openbsd-tech&m=129236621626462&w=2
I do like the “Merry Christmas” at the end.
5 Replies to “Possible backdoors in NetBSD IPSEC stack?”