Re: [Full-Disclosure] JAP back doored

[Florian Weimer <fw@deneb.enyo.de>]

"Drew Copley" <dcopley@eeye.com> writes:

> Why is the state of Germany trojanizing applications which may be
> run by anyone on the planet?

Why is the U.S. government interfering with the publication of
security advisories if the corresponding software is being run
throughout the world?

The German government funds the AN.ON project, but allowed for a great
deal of independence.  Naturally, this independence does not extend to
the law, thanks to separation of powers.  Now a judge has forced the
operators to implement a surveillance interface, which is possible
because of a design weakness.  But that's just the beginning of the
legal process.  The project has announced that it plans to fight, but
within the legal system.

> How is it they believe they have a right to trojanize someone
> outside of Germany?

Nobody forces you to use the German service if you don't trust the
operators or (thanks to recent events) German law enforcement.

> This is blatantly illegal in just about every country outside of
> Germany.  Literally. 

No, it isn't.  Most countries with communication infrastructure have
laws that regulate law enforcement access.  This is not a "stupid
local law" issue.

Your country is eavesdropping foreign communication as well.

> Or, do they believe they are superior to other countries, and they may
> invade at will?

Please check the facts.  Germany doesn't an operate eavesdropping base
in the U.S., but the U.S. do in Germany.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html