D 2014-03-02T21:22:57.404
L nsa-backdoor
P c36cdf091101f79393c7bb42f92a079d528e6fe9
U bernd
W 1299
<h1>NSA Backdoor Fnord</h1>
<p>As you all know, it is not allowed to speak about NSA-demanded backdoors,
and especially it is strictly prohibited to give any details. However, it
is allowed to boldly lie about NSA-demanded backdoors if you didn't receive
such a request, because you are not under a gag order, and in general, lying
about the quality of your product is not only legal, but "best practice".
The purpose of this NSA backdoor fnord is to make you worry about the
quality of net2o, and therefore you start looking at the source code; the
topics mentioned here are all security things to consider.</p>
<p>Therefore, here is the official statement about NSA-demanded backdoors:
There is a NSA-requested backdoor in net2o. Update: The NSA was here
again, and wasn't satisfied with me reverting the code back to the original
backdoor (you remember: reliable resetting the shared secret on both sides, so
it appears to be computed, but is never used). Apparently they still
can't get in... but they asked me to upload as much possible identification to
the DHT for NAT traversal information, because metadata is more important than
data.</p>
<p>As net2o is open source, you can verify the truth value of the statement
above. And keep an eye on this page.</p>
Z 75aa91e57c3f53ce51cfe64ff29ac9e7