OpenBSD Founder: Contractor tried to write back doors

Email LinkedIn
Tools

Theo de Raadt, the founder and leader of the OpenBSD project personally believes that the now-defunct Network Security Technology (NetSec) company did attempt to write backdoors in the BSD code base. However, de Raadt did not think that any deliberate security vulnerabilities that were created made it into the source tree, based on the issues that were uncovered so far, according to a report published on InformationWeek.

Speculation began after Gregory Perry, former CTO of NetSec, recently alleged that the FBI hired NetSec to create backdoors in the OpenBSD codebase, specifically in the code that implements IPsec for the BSD operating system. Two bugs were discovered to date, which fuelled suspicions after they were traced to developers who had worked for NetSec, albeit at different times. Thomas Ptacek, a security researcher at Matasano Security concurred with de Raadt. Ptacek told Hacker News that "This is a neat attack, but also a total pain in the [sic] to use, and certainly not an FBI backdoor in OpenBSD IPsec."

For more on this story:
- check out this article at InfoWorld
- check out this article at InformationWeek
- check out this article at Hacker News

Related Articles:
Q&A: Gunnar Hellekson on open source adoption in government 
New report attempts to measure open source CMS popularity
Navigating the open source CMS selection process