January 2011 - Darwin-dev - lists.apple.com

Re: backdoors
by Stephen J. Butler 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=/c/xwi+x+05TTomBYLN1y1Q52pnYe54EX9mTY/4YM1Y=; b=KnrIYBLFSXsUZSr5ihRniZ/4x2W/Ai5sMMOWVnPCwPGtFHbqubEC3+zsDBBAHHwo9a f+JZIUtjLwerRlL0LalQpYa4BqRZJiy5s+WW62qXy0gDWfW5EmiwkIS5AlmTBWK3PyuG X7hZDm0y/HpQecWP/PWRdKQJQ5rt6p2TNWq2Q= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=cNvC9WPLMo7WTk+bSr9L6HgnB4KXFuMhgBgijQ9jiUOwBd3vFKfNylkDOR0cJA8AA9 RPg0UsEd6Bavm4kRw+Pe0U1tEc+m7joFxeQJRqkIE9z0f9wFJZGAqayHAfJe4P3HYTA9 +SAGOaj5X55QxP52VFsU73158cQWaSi56xfa8= On Wed, Jan 5, 2011 at 4:15 PM, Axel Luttgens <luttgens(a)fusl.ac.be> wrote: > Either some posts didn't arrive in my mailbox, or some of them were off-list. Anyway, I'm lost... > What are we speaking about? ;-) He wants us to tell him where all the backdoors are in the kernel, because he doesn't know ObjC. Except we told him there aren't any known backdoors, the kernel isn't ObjC, and if he wanted a security audit he'd have to do it himself. The rest of these posts have been rather unintelligible attempts at cross posting an OT discussion to a web forum. I wish he'd just stop... _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: backdoors
by Axel Luttgens 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Le 5 janv. 2011 à 20:14, Esteban Vincenzi a écrit : > // always 'cc ...m.lists can be a little boring sometimes. > > Inizio messaggio inoltrato: > >> Da: Esteban Vincenzi <vincenzi(a)lavabit.com> >> Data: gennaio 5, 2554 BE 13:13:42 GMT-06.00 >> A: Alastair Houghton <alastair(a)alastairs-place.net> >> Oggetto: Re: backdoors >> >> it is real, Fae seceded from Costa Rica last year. >> if you want, i can included the constitution, but that's... off-topic. >> >> regars, >> Stephen >> >> Il giorno gen 5, 2554 BE, alle ore 11:30, Alastair Houghton ha scritto: >> >>> On 5 Jan 2011, at 15:02, Esteban Vincenzi wrote: >>> >>>>> btw, the EULA (specially section "Apple-only hardware") is not enforcable in Fae. >>> >>> I bet that's nonsense. You should talk to a lawyer rather than listening to the Internet. >>> >>> Kind regards, >>> >>> Alastair. Hmm... Either some posts didn't arrive in my mailbox, or some of them were off-list. Anyway, I'm lost... What are we speaking about? ;-) _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

backdoors
by Esteban Vincenzi 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=jEmDk3/JIwO9Z7FTiQ8Ik90FwmbwA0xOhDpGtGpZKITgvjox3+p50vZ+Kedype16/AmKMM9q6pWDWwbEfcLswqXVdmctE9lSLiNkKC+1/J+Z2exK/iss2Bw2y94kAl+o85x1vhT8oqyq5C/TmXvudz/JXIyd8f9GldWAu76llI4=; h=From:Content-Type:Subject:Date:References:Cc:Message-Id:Mime-Version:X-Mailer:To; _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: backdoors
by Alastair Houghton 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha1; c=relaxed; d=coriolis-systems.com; h= subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=aug07; bh=7FzxWcWzA2uU+KJoaMuKTbmgFfA=; b=M2tscFj3wg8Fn7Wlz8ZYM8wdek91 tF5ypr2fqXAWuOHvb3A7MPlQbHiST+Jst7VjWCXt+G82lM9To8/fop9fguUekbZm oXwlJBAPuOPfc0w6az6en3ZYLued/5BjoLDZUAs40Vcq2iFUgW7ucRhDH8vbkcFW WdWA4Yuu2EcvN8s= On 5 Jan 2011, at 15:02, Esteban Vincenzi wrote: >> btw, the EULA (specially section "Apple-only hardware") is not enforcable in Fae. I bet that's nonsense. You should talk to a lawyer rather than listening to the Internet. Kind regards, Alastair. -- http://alastairs-place.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

backdoors
by Esteban Vincenzi 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=aUsA5Tfp3jikbYr9+FwkHloWE+MDPxVdoV/eNQzAfDN9Nxe1xfTV8msuIQm/pA56hWTrGAfYh3LzH08cdLcaf+rcYr6fEcQtbinkIvLCo3H7Qk12W1urHW0D3GmSKEgEKEvXDSwFCVc/MG09+E7axXbNKTSvzp+maTrqrwq5noU=; h=From:Content-Type:Subject:Date:References:To:Message-Id:Mime-Version:X-Mailer; _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

backdoors
by Esteban Vincenzi 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=aa3Abj28K0eF/6aA4iHdzrXwLEAAP5AYEQivsgSXDpNmCJZGss0PetIF+hCZeqVCBo+wd3AwOICJpzwe3DEYXXZHnVDsGqJbHfcBJQzc9EebckIBa53m43F+7xnN7mgl7GwaoPSFFSNGcZBbHclXXPIbeYzc+T2wWZQFAugY+6c=; h=From:Content-Type:Subject:Date:References:To:Message-Id:Mime-Version:X-Mailer; _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: backdoors
by Jean-Daniel Dupas 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Le 5 janv. 2011 à 05:13, Jason Coco a écrit : > The xnu kernel is written in C with little bits of C++ here and there (like the open bits of IO kit). You shouldn't have to worry about any ObjC code. re: the EFI, I think you definition of 'kernel' may be a bit skewed. Also, back doors tend to be things written in the higher-level software that make up an OS, and not in the kernel (like a master-password that the login app always responds to, etc.). Or possibly things like crypto libraries that always embed a second copy of the key in the key-bag which can be decrypted by a private key that the government has, etc. > > You can narrow the scope of your search by focusing on any utility that needs be run as uid 0 and the standard crypto libraries (although with Darwin that's OpenSSH which is quite well peer-reviewed). Darwin uses its own implementation of CDSA for security, not OpenSSH (even if it reuse some OpenSSH code for cryptographic algorithm implementation). The Security Framework does not even link to libcrypto and libssl. So checking crytpo library will require more work than just checking OpenSSh code. > On Jan 4, 2011, at 23:00 , Esteban Vincenzi wrote: > >> hi all, >> do the Darwin kernel has backdoors to any "spy network"? specially interested in backdoors to any .gov's. Yes, you can get all technicals and practicals information by searching for backdoor in the Mac OS X Help Manual… >> not on the mood of solo'ing an audit of ObjC code; specially that there are no decent (or accessible, or known) ObjC references. >> >> if there's EFi, enSUI doesn't require a (traditional) kernel. -- Jean-Daniel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: backdoors
by Jorge 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: backdoors
by Jason Coco 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com The xnu kernel is written in C with little bits of C++ here and there (like the open bits of IO kit). You shouldn't have to worry about any ObjC code. re: the EFI, I think you definition of 'kernel' may be a bit skewed. Also, back doors tend to be things written in the higher-level software that make up an OS, and not in the kernel (like a master-password that the login app always responds to, etc.). Or possibly things like crypto libraries that always embed a second copy of the key in the key-bag which can be decrypted by a private key that the government has, etc. You can narrow the scope of your search by focusing on any utility that needs be run as uid 0 and the standard crypto libraries (although with Darwin that's OpenSSH which is quite well peer-reviewed). On Jan 4, 2011, at 23:00 , Esteban Vincenzi wrote: > hi all, > do the Darwin kernel has backdoors to any "spy network"? specially interested in backdoors to any .gov's. > > not on the mood of solo'ing an audit of ObjC code; specially that there are no decent (or accessible, or known) ObjC references. > > if there's EFi, enSUI doesn't require a (traditional) kernel. > > ciao tutti, > SG Vincenzi > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/jason%409mmedia.com > > This email sent to jason(a)9mmedia.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

backdoors
by Esteban Vincenzi 05 Jan '11

05 Jan '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=F8jiohwrHi8WTqRXhcMFRddoWeeBB6tYsnMb0P3HDWK2/7f1vl689VpXq/nRsTv2DPVSpe5OhXXyt4ZWFYyszxa5F/f06mhbHK4e9fzJPDnzhnAdHgE+XgfnQd08qofTB0ijOcpCJKVsk3hoSrx97icyq1Rrp2BPipYBykoQ/B8=; h=From:Content-Type:Content-Transfer-Encoding:Subject:Date:Message-Id:To:Mime-Version:X-Mailer; hi all, do the Darwin kernel has backdoors to any "spy network"? specially interested in backdoors to any .gov's. not on the mood of solo'ing an audit of ObjC code; specially that there are no decent (or accessible, or known) ObjC references. if there's EFi, enSUI doesn't require a (traditional) kernel. ciao tutti, SG Vincenzi _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0