Re: NSA software in Debian

2014-01-28 Thread Russell Coker
On Fri, 24 Jan 2014, Marko Randjelovic marko...@eunet.rs wrote: I would also like this. Yesterday I started compiling 3.2.54 with grsec and PaX. A ready debian kernel(-source) with grsec and PaX would be fine. Currently I am distributing my special packages via my own repository - is there

debcheckroot v1.0 released

2014-01-28 Thread Elmar Stellnberger
Dear Debian-Security Having just released debcheckroot I wanna shortly present you my new tool: It was originally designed as a replacement for debsums and has the following qualities: * full support of Debian repos reading /etc/[apt/]sources.list to fetch checksums online * it can check a

Re: NSA software in Debian

2014-01-28 Thread Hans-Christoph Steiner
On 01/26/2014 01:30 PM, Andrew McGlashan wrote: On 25/01/2014 7:39 PM, Emmanuel Thierry wrote: Then DNSSEC appeared ! :) I wish it was that simple I don't believe it is today, but one day it will have to be the standard. I remind you it is really difficult to compromise DNS zones

Re: NSA software in Debian

2014-01-28 Thread Jeremie Marguerie
On Tue, Jan 28, 2014 at 2:08 PM, Hans-Christoph Steiner h...@at.or.at wrote: I think the MITM attacks that the NSA does on the core internet routers are likely based on IP rather than DNS. The reports talk about the system is setup to respond before any of the real servers can. So my guess is