Re: Security via the NSA?

2009-11-26 Thread Christian Weisgerber
Marco Peereboom sl...@peereboom.us wrote: Never mind no one verifying any of the keys or anything else that SSL spits out. I am talking to you firefox! That's pretty strange coming from the guy who complained the loudest about recent Firefox releases that actually try to enforce the chain of

Re: Security via the NSA?

2009-11-26 Thread rhubbell
On Thu, 26 Nov 2009 14:45:32 + (UTC) Christian Weisgerber wrote: Marco Peereboom sl...@peereboom.us wrote: Never mind no one verifying any of the keys or anything else that SSL spits out. I am talking to you firefox! That's pretty strange coming from the guy who complained the

Re: Security via the NSA?

2009-11-25 Thread Bob Beck
Like everyone verifies SSL.. right? 2009/11/21 Samuel Baldwin recursive.for...@gmail.com: 2009/11/21 AG computing.acco...@googlemail.com: Depends on whether one trusts the NSA or not. That's the nice thing about open source software; we don't have to, because we can verify their code or

Re: Security via the NSA?

2009-11-25 Thread Marco Peereboom
Maybe if it was readable. I'll argue it was written by the NSA to make it unreadable for mere mortals so that they can sneak in all their sicrit backdoors! Never mind no one verifying any of the keys or anything else that SSL spits out. I am talking to you firefox! On Wed, Nov 25, 2009 at

Re: Security via the NSA?

2009-11-25 Thread Gilles Chehade
Pfff, you know damn well that reading the OpenSSL doc should be enough to get a grasp at how things work ... Gilles On Wed, Nov 25, 2009 at 02:53:19PM -0600, Marco Peereboom wrote: Maybe if it was readable. I'll argue it was written by the NSA to make it unreadable for mere mortals so that

Re: Security via the NSA?

2009-11-25 Thread Matthias Kilian
On Wed, Nov 25, 2009 at 10:04:59PM +0100, Gilles Chehade wrote: OpenSSL doc parse error

Re: Security via the NSA?

2009-11-24 Thread Doug Milam
--Good luck verifying the mathematics yourself, though. No small statement, that On Sat, Nov 21, 2009 at 05:42:48PM -0500, Samuel Baldwin wrote: 2009/11/21 AG computing.acco...@googlemail.com: Depends on whether one trusts the NSA or not. That's the nice thing about open source software;

Re: Security via the NSA?

2009-11-23 Thread Christian Weisgerber
Nick Guenther kou...@gmail.com wrote: Like, obviously the NSA's mandate is spying Actually, that's only half the NSA's mandate. The other half is protecting the US government from spying. -- Christian naddy Weisgerber na...@mips.inka.de

Re: Security via the NSA?

2009-11-22 Thread Marc Espie
On Sat, Nov 21, 2009 at 05:42:48PM -0500, Samuel Baldwin wrote: 2009/11/21 AG computing.acco...@googlemail.com: Depends on whether one trusts the NSA or not. That's the nice thing about open source software; we don't have to, because we can verify their code or mathematics ourselves.

Re: Security via the NSA?

2009-11-22 Thread Peter Hessler
On 2009 Nov 21 (Sat) at 17:42:48 -0500 (-0500), Samuel Baldwin wrote: :2009/11/21 AG computing.acco...@googlemail.com: : Depends on whether one trusts the NSA or not. : :That's the nice thing about open source software; we don't have to, :because we can verify their code or mathematics ourselves.

OT Re: Security via the NSA?

2009-11-22 Thread Diana Eichert
I am now adding to the noise. c'mon folks, stop this. there are ways to insert holes into any O/S that allows loading of firmware blobs. how many end users have torn one apart to see what it really does? IO processors have access to your data at a very intimate level, think about it then

Re: OT Re: Security via the NSA?

2009-11-22 Thread Marco Peereboom
google we are talking to you! On Sun, Nov 22, 2009 at 09:02:19AM -0700, Diana Eichert wrote: I am now adding to the noise. c'mon folks, stop this. there are ways to insert holes into any O/S that allows loading of firmware blobs. how many end users have torn one apart to see what it really

Re: Security via the NSA?

2009-11-22 Thread Internet Retard
Date: Sat, 21 Nov 2009 23:07:31 -0600 From: j...@fixedpointgroup.com To: misc@openbsd.org Subject: Re: Security via the NSA? can [sic] we stop these dumb posts about the NSA and windows [sic] 7? Only if you stop these dumb posts asking others to stop their dumb posts. Sincerely, IRT

Re: Security via the NSA?

2009-11-22 Thread bofh
That just means NoSuchUser is well hidden!! :) On 11/21/09, Henning Brauer lists-open...@bsws.de wrote: * AG computing.acco...@googlemail.com [2009-11-21 23:41]: Depends on whether one trusts the NSA or not. right, of course the NSA gets commit access and peer review rules don't apply.

Re: Security via the NSA?

2009-11-22 Thread patrick keshishian
On Sun, Nov 22, 2009 at 8:51 AM, bofh goodb...@gmail.com wrote: That just means NoSuchUser is well hidden!! :) rather, henning must be running badfinger. -pk On 11/21/09, Henning Brauer lists-open...@bsws.de wrote: * AG computing.acco...@googlemail.com [2009-11-21 23:41]: Depends on

Security via the NSA?

2009-11-21 Thread Doug Milam
Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html

Re: Security via the NSA?

2009-11-21 Thread Felipe Alfaro Solana
On Sat, Nov 21, 2009 at 8:29 PM, Doug Milam doug_mi...@yahoo.com wrote: Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html NSA also helped Linux with SElinux. As long as OpenBSD remains open source, I don't see the problem.

Re: Security via the NSA?

2009-11-21 Thread AG
Felipe Alfaro Solana wrote: On Sat, Nov 21, 2009 at 8:29 PM, Doug Milam doug_mi...@yahoo.com wrote: Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html NSA also helped Linux with SElinux. As long as OpenBSD remains open

Re: Security via the NSA?

2009-11-21 Thread Samuel Baldwin
2009/11/21 AG computing.acco...@googlemail.com: Depends on whether one trusts the NSA or not. That's the nice thing about open source software; we don't have to, because we can verify their code or mathematics ourselves. -- Samuel Baldwin - logik.li

Re: Security via the NSA?

2009-11-21 Thread Nick Guenther
On Sat, Nov 21, 2009 at 5:32 PM, AG computing.acco...@googlemail.com wrote: Felipe Alfaro Solana wrote: On Sat, Nov 21, 2009 at 8:29 PM, Doug Milam doug_mi...@yahoo.com wrote: Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html

Re: Security via the NSA?

2009-11-21 Thread Henning Brauer
* AG computing.acco...@googlemail.com [2009-11-21 23:41]: Depends on whether one trusts the NSA or not. right, of course the NSA gets commit access and peer review rules don't apply. right. henn...@cvs:2$ finger nsa finger: nsa: no such user. hmm. -- Henning Brauer, h...@bsws.de,

Re: Security via the NSA?

2009-11-21 Thread Felipe Alfaro Solana
On Sat, Nov 21, 2009 at 11:32 PM, AG computing.acco...@googlemail.comwrote: Felipe Alfaro Solana wrote: On Sat, Nov 21, 2009 at 8:29 PM, Doug Milam doug_mi...@yahoo.com wrote: Will OpenBSD be the next to be 'helped'?

Re: Security via the NSA?

2009-11-21 Thread Cor
Doug Milam wrote: Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html Only if they Paypal some $$$ to http://www.openbsd.org/donations.html :)

Re: Security via the NSA?

2009-11-21 Thread Steve Shockley
On 11/21/2009 6:01 PM, Henning Brauer wrote: henn...@cvs:2$ finger nsa finger: nsa: no such user. hmm. Perhaps they use a less obvious user name, like 'henning'...

Re: Security via the NSA?

2009-11-21 Thread Jacob Yocom-Piatt
Doug Milam wrote: Will OpenBSD be the next to be 'helped'? http://www.npr.org/blogs/thetwo-way/2009/11/nsa_microsoft_windows_7.html can we stop these dumb posts about the NSA and windows 7? it's really not related to openbsd. spend less time being preoccupied with the fact that