Re: NSA software in Debian

2014-01-28 Thread Jeremie Marguerie
On Tue, Jan 28, 2014 at 2:08 PM, Hans-Christoph Steiner wrote: > I think the MITM attacks that the NSA does on the core internet routers are > likely based on IP rather than DNS. The reports talk about the system is > setup to respond before any of the real servers can. So my guess is that they

Re: NSA software in Debian

2014-01-28 Thread Hans-Christoph Steiner
On 01/26/2014 01:30 PM, Andrew McGlashan wrote: > On 25/01/2014 7:39 PM, Emmanuel Thierry wrote: >> Then DNSSEC appeared ! :) > > I wish it was that simple I don't believe it is today, but one day > it will have to be the standard. > >> I remind you it is really difficult to compromise DNS

debcheckroot v1.0 released

2014-01-28 Thread Elmar Stellnberger
Dear Debian-Security Having just released debcheckroot I wanna shortly present you my new tool: It was originally designed as a replacement for debsums and has the following qualities: * full support of Debian repos reading /etc/[apt/]sources.list to fetch checksums online * it can check a Deb

Re: NSA software in Debian

2014-01-28 Thread Russell Coker
On Fri, 24 Jan 2014, Marko Randjelovic wrote: > > I would also like this. Yesterday I started compiling 3.2.54 with grsec > > and PaX. A ready debian kernel(-source) with grsec and PaX would be > > fine. Currently I am distributing my special packages via my own > > repository - is there any conce