Re: NSA software in Debian

2014-01-19 Thread Andreas Kuckartz
Marko Randjelovic: > SELinux security benefits are vague because it makes possible to > use it's hooks to add a backdoor which would be nearly impossible > to detect: > > https://www.rsbac.org/documentation/why_rsbac_does_not_use_lsm > https://grsecurity.net/lsm.php SELinux, AppArmor, Smack and

Re: NSA software in Debian

2014-01-19 Thread Andrew Merenbach
On 01/19/2014 04:06 PM, Kevin Olbrich wrote: I did not know about grsecurity. Thanks for the hint. After some quick browsing it seemed it works like the windows code execution protection. I will try to compile the kernel with this patch like you did. Linux is the most secure OS IMHO - distribu

Re: NSA software in Debian

2014-01-19 Thread Celejar
On Mon, 20 Jan 2014 11:45:08 +0800 Paul Wise wrote: > On Mon, Jan 20, 2014 at 7:27 AM, Celejar wrote: > > > A lot of people in this discussion seem to have your tacit assumption, > > that the NSA and its tactics are fundamentally at odds with morality. > > JFTR, many of us do not agree. > > Cou

Re: NSA software in Debian

2014-01-19 Thread Paul Wise
On Mon, Jan 20, 2014 at 7:27 AM, Celejar wrote: > A lot of people in this discussion seem to have your tacit assumption, > that the NSA and its tactics are fundamentally at odds with morality. > JFTR, many of us do not agree. Could you explain the reason for your disagreement with this assumption

Re: NSA software in Debian

2014-01-19 Thread Kevin Olbrich
Hi, I did not know about grsecurity. Thanks for the hint. After some quick browsing it seemed it works like the windows code execution protection. I will try to compile the kernel with this patch like you did. Linux is the most secure OS IMHO - distributing this patch in debian would be great

Re: NSA software in Debian

2014-01-19 Thread Marko Randjelovic
On 19 Jan 2014 12:16:25 +0100 "Andreas Kuckartz" wrote: > Bjoern Meier: > > http://en.wikipedia.org/wiki/Security-Enhanced_Linux > > I proposed this Debian Release Goal: > https://wiki.debian.org/ReleaseGoals/SELinux > > Cheers, > Andreas > > SELinux security benefits are vague because it ma

Re: NSA software in Debian

2014-01-19 Thread Marko Randjelovic
On Sat, 18 Jan 2014 15:04:48 -0500 Noah Meyerhans wrote: > On Sat, Jan 18, 2014 at 08:30:49PM +0100, Marco Saller wrote: > > i am not sure if this question has been asked or answered yet, please do > > not mind if i would ask it again. > > Is it possible that the NSA or other services included i

Re: NSA software in Debian

2014-01-19 Thread Celejar
On Sun, 19 Jan 2014 22:58:54 +0100 "JKAbrams.se" wrote: ... > And no, least there be speculation, I have no information to this > effect, and from what I've learned of the open source community I > don't think this is likely, for many of us it's a kind of moral > calling that brought us here in

Re: NSA software in Debian

2014-01-19 Thread JKAbrams.se
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2014-01-18 21:04, Noah Meyerhans wrote: > On Sat, Jan 18, 2014 at 08:30:49PM +0100, Marco Saller wrote: >> i am not sure if this question has been asked or answered yet, >> please do not mind if i would ask it again. Is it possible that >> the NSA

Re: Can't find gpg key AD11CF6A

2014-01-19 Thread Kevin Olbrich
Hi, there is an open bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707006 http://osdir.com/ml/debian-live/2013-06/msg00029.html You can post to: https://lists.debian.org/debian-live/ Mit freundlichen Grüßen / best regards, Kevin Olbrich. Web: http://kevin-olbrich.de/ -- Diese E-M

Can't find gpg key AD11CF6A

2014-01-19 Thread sebsach
Hi, i want to verify the checksum files of current debian live cds. gpg says they were signed with key id AD11CF6A. The instructions on http://keyring.debian. org/ say this key is included in debian gpg keyring: [...] pub 4096R/AD11CF6A 2013-05-06 Key fingerprint = 1E4F 435C 4E9A 42B3 D9

Re: NSA software in Debian

2014-01-19 Thread Andreas Kuckartz
Bjoern Meier: > http://en.wikipedia.org/wiki/Security-Enhanced_Linux I proposed this Debian Release Goal: https://wiki.debian.org/ReleaseGoals/SELinux Cheers, Andreas -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas.

Re: NSA software in Debian

2014-01-19 Thread Kevin Olbrich
Even if there would not be a manipulated software package - hardware manipulation in mainboards or network hardware (like cisco does) is already known. Mit freundlichen Grüßen / best regards, Kevin Olbrich. (mobil vom iPhone) -- Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte I