[svlug] OpenSSH source may be trojaned, unless...

[Drew Bertola]

On Thu, Aug 01, 2002 at 03:23:45PM -0400, Bruce O. Benson wrote:
> 
> You may have a trojaned OpenSSH source, unless you run Debian,
> in which case you're OK.

That's the silliest conclusion I've ever read on this list, specially
from a security SIG co-chair.  Running Debian has nothing to do with
being OK.  Think about it first.

Let's say Sue runs Debian, but she just downloaded, built, and
installed the trojaned openssh.  Is she ok?

-- 
+---------------------- T h e C o o p . n e t ----------------------+
| Drew Bertola         Hosting - Colocation      Tel:  408-738-8337 |
| TheCoop.net      Programming - Administration  Mob:  408-887-0426 |
| drew at thecoop.net    Open Source Specialists    http://thecoop.net |
+-------------------------------------------------------------------+