Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. OpenSSH trojaned...hmmmm

OpenSSH trojaned...hmmmm

Scheduled Pinned Locked Moved The Lounge
csharpasp-netsecurityquestionlearning
38 Posts 13 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S Offline
    S Offline
    Senkwe Chanda
    wrote on last edited by
    #1

    chekit[^] I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is, because the majority of people that will be depending on that code can't do anything with it. Useful for devs, useless for granny. The utlimate irony of course is the fact that basically, the source is tainted (if you have it) while the binaries are all ok, hehe. Bill must be grinning. Senkwe ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

    B C B 3 Replies Last reply
    0
    • S Senkwe Chanda

      chekit[^] I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is, because the majority of people that will be depending on that code can't do anything with it. Useful for devs, useless for granny. The utlimate irony of course is the fact that basically, the source is tainted (if you have it) while the binaries are all ok, hehe. Bill must be grinning. Senkwe ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

      B Offline
      B Offline
      benjymous
      wrote on last edited by
      #2

      But the flipside is that somebody planted a trojan into the source, which has been found, and made known. If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? -- Help me! I'm turning into a grapefruit!

      D S R 3 Replies Last reply
      0
      • B benjymous

        But the flipside is that somebody planted a trojan into the source, which has been found, and made known. If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? -- Help me! I'm turning into a grapefruit!

        D Offline
        D Offline
        Daniel Turini
        wrote on last edited by
        #3

        benjymous wrote: If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? Have you ever heard of "peer code review" ? Concussus surgo. When struck I rise.

        B T 2 Replies Last reply
        0
        • B benjymous

          But the flipside is that somebody planted a trojan into the source, which has been found, and made known. If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? -- Help me! I'm turning into a grapefruit!

          S Offline
          S Offline
          Senkwe Chanda
          wrote on last edited by
          #4

          benjymous wrote: what are the chances that anyone would ever notice? Interesting point. It should have happened by now though, I guess their HR is good. It would be interesting to find out exactly HOW this was allowed to happen though. ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

          1 Reply Last reply
          0
          • D Daniel Turini

            benjymous wrote: If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? Have you ever heard of "peer code review" ? Concussus surgo. When struck I rise.

            B Offline
            B Offline
            benjymous
            wrote on last edited by
            #5

            Daniel Turini wrote: Have you ever heard of "peer code review" ? Yeah, you get stuff like that at the start of projects, then suddenly the deadlines start approaching, and anything sensible such as planning and testing go out of the window as management want the code finished yesterday -- Help me! I'm turning into a grapefruit!

            1 Reply Last reply
            0
            • S Senkwe Chanda

              chekit[^] I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is, because the majority of people that will be depending on that code can't do anything with it. Useful for devs, useless for granny. The utlimate irony of course is the fact that basically, the source is tainted (if you have it) while the binaries are all ok, hehe. Bill must be grinning. Senkwe ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

              C Offline
              C Offline
              Chris Losinger
              wrote on last edited by
              #6

              who wants to bet whoever did it was employed or hired by MS? :) -c


              To explain Donald Knuth's relevance to computing is like explaining Paul's relevance to the Catholic Church. He isn't God, he isn't the Son of God, but he was sent by God to explain God to the masses.
                 /. #3848917

              image effects!

              S P B 3 Replies Last reply
              0
              • C Chris Losinger

                who wants to bet whoever did it was employed or hired by MS? :) -c


                To explain Donald Knuth's relevance to computing is like explaining Paul's relevance to the Catholic Church. He isn't God, he isn't the Son of God, but he was sent by God to explain God to the masses.
                   /. #3848917

                image effects!

                S Offline
                S Offline
                Senkwe Chanda
                wrote on last edited by
                #7

                hehe, well Open Source folk believe that MS devs are incompetent. As such it would be a hard pill to swallow if indeed some MS employee was implicated in breaching THEIR security ;P It was def one of their own though. ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                1 Reply Last reply
                0
                • B benjymous

                  But the flipside is that somebody planted a trojan into the source, which has been found, and made known. If a pissed off ms employee planted something nasty into the source of a ms product, what are the chances that anyone would ever notice? -- Help me! I'm turning into a grapefruit!

                  R Offline
                  R Offline
                  Roger Wright
                  wrote on last edited by
                  #8

                  benjymous wrote: what are the chances that anyone would ever notice? Of course someone would notice; it isn't M$ that finds all these security flaws we have to continuously download patches for, but users. In this case, though, the unexpected behavior would be redefined as a "feature" or a behavior that is "by design" and ignored until the next SP. :) "Knock, knock." "Who's there?" "Recursion." "Recursion who?" "Knock, knock..."

                  S 1 Reply Last reply
                  0
                  • S Senkwe Chanda

                    chekit[^] I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is, because the majority of people that will be depending on that code can't do anything with it. Useful for devs, useless for granny. The utlimate irony of course is the fact that basically, the source is tainted (if you have it) while the binaries are all ok, hehe. Bill must be grinning. Senkwe ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                    B Offline
                    B Offline
                    Brian Azzopardi
                    wrote on last edited by
                    #9

                    Senkwe Chanda wrote: I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is Here we go again. It seems bashing open-source is a hobby for some people. Senkwe: weren't you the one who complained recently about people bashing .Net? Senkwe Chanda wrote: code can't do anything with it. Useful for devs, useless for granny. What's that supposed to mean? That because some ppl don't have time to look over the source then it should not be handed out? And why can't they do anything with it? Senkwe Chanda wrote: Bill must be grinning. If he grins at this kinda news then he's pretty desparate. I think Bill has more important things on his mind. Like for example that recent MS push for bibamus, edamus, cras moriemur

                    [eat, drink, for tomorrow we die]

                    S P E 3 Replies Last reply
                    0
                    • C Chris Losinger

                      who wants to bet whoever did it was employed or hired by MS? :) -c


                      To explain Donald Knuth's relevance to computing is like explaining Paul's relevance to the Catholic Church. He isn't God, he isn't the Son of God, but he was sent by God to explain God to the masses.
                         /. #3848917

                      image effects!

                      P Offline
                      P Offline
                      peterchen
                      wrote on last edited by
                      #10

                      Not me


                      You don't need to sleep to see a nightmare  Anne Clark   [sighist]

                      1 Reply Last reply
                      0
                      • B Brian Azzopardi

                        Senkwe Chanda wrote: I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is Here we go again. It seems bashing open-source is a hobby for some people. Senkwe: weren't you the one who complained recently about people bashing .Net? Senkwe Chanda wrote: code can't do anything with it. Useful for devs, useless for granny. What's that supposed to mean? That because some ppl don't have time to look over the source then it should not be handed out? And why can't they do anything with it? Senkwe Chanda wrote: Bill must be grinning. If he grins at this kinda news then he's pretty desparate. I think Bill has more important things on his mind. Like for example that recent MS push for bibamus, edamus, cras moriemur

                        [eat, drink, for tomorrow we die]

                        S Offline
                        S Offline
                        Senkwe Chanda
                        wrote on last edited by
                        #11

                        Brian Azzopardi wrote: It seems bashing open-source is a hobby for some people Err, yeah I do bash the GPL and Open Source quite a bit. But I bash MS just as much :-D For example, I'm one of the (very) few people that believe Linux will overtake Windows sooner rather than later, which doesn't bother me a bit. Having said that, the few open source apps I've tried have generally sucked (except for Mozilla which is ugly but doesn't suck) So I prefer to play both sides half way. ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                        B P 2 Replies Last reply
                        0
                        • B Brian Azzopardi

                          Senkwe Chanda wrote: I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is Here we go again. It seems bashing open-source is a hobby for some people. Senkwe: weren't you the one who complained recently about people bashing .Net? Senkwe Chanda wrote: code can't do anything with it. Useful for devs, useless for granny. What's that supposed to mean? That because some ppl don't have time to look over the source then it should not be handed out? And why can't they do anything with it? Senkwe Chanda wrote: Bill must be grinning. If he grins at this kinda news then he's pretty desparate. I think Bill has more important things on his mind. Like for example that recent MS push for bibamus, edamus, cras moriemur

                          [eat, drink, for tomorrow we die]

                          P Offline
                          P Offline
                          peterchen
                          wrote on last edited by
                          #12

                          Brian Azzopardi wrote: bashing open-source is a hobby for some people ME! ME! LET ME JOIN!!! I love to bash open source for lack of a serious business model (besides the Semi-SAS approach) and for their abuse of the word "free".


                          You don't need to sleep to see a nightmare  Anne Clark   [sighist]

                          B 1 Reply Last reply
                          0
                          • B Brian Azzopardi

                            Senkwe Chanda wrote: I still maintain that access to the source (via the GPL) is not as wonderful as Open Source advocates claim it is Here we go again. It seems bashing open-source is a hobby for some people. Senkwe: weren't you the one who complained recently about people bashing .Net? Senkwe Chanda wrote: code can't do anything with it. Useful for devs, useless for granny. What's that supposed to mean? That because some ppl don't have time to look over the source then it should not be handed out? And why can't they do anything with it? Senkwe Chanda wrote: Bill must be grinning. If he grins at this kinda news then he's pretty desparate. I think Bill has more important things on his mind. Like for example that recent MS push for bibamus, edamus, cras moriemur

                            [eat, drink, for tomorrow we die]

                            E Offline
                            E Offline
                            Eddie Velasquez
                            wrote on last edited by
                            #13

                            Brian Azzopardi wrote: Here we go again. It seems bashing open-source is a hobby for some people I thought Microsoft-bashing was the hobby!:confused::confused:


                            All of my opinions are correct, even when reality makes the mistake of disagreeing with me.
                            ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                            1 Reply Last reply
                            0
                            • R Roger Wright

                              benjymous wrote: what are the chances that anyone would ever notice? Of course someone would notice; it isn't M$ that finds all these security flaws we have to continuously download patches for, but users. In this case, though, the unexpected behavior would be redefined as a "feature" or a behavior that is "by design" and ignored until the next SP. :) "Knock, knock." "Who's there?" "Recursion." "Recursion who?" "Knock, knock..."

                              S Offline
                              S Offline
                              Senkwe Chanda
                              wrote on last edited by
                              #14

                              Roger Wright wrote: Of course someone would notice; it isn't M$ that finds all these security flaws we have to continuously download patches for, but users True. The fact is MS has always been sloppy because they had no serious competition. It's going to be hard to shake the habit now. But I always wonder about the speed at which bugs in Open Source software are fixed. It's usually a matter of days. That's pretty quick. Who does the regression testing? Who tests the patches to ensure they don't break something else down the line? ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                              1 Reply Last reply
                              0
                              • S Senkwe Chanda

                                Brian Azzopardi wrote: It seems bashing open-source is a hobby for some people Err, yeah I do bash the GPL and Open Source quite a bit. But I bash MS just as much :-D For example, I'm one of the (very) few people that believe Linux will overtake Windows sooner rather than later, which doesn't bother me a bit. Having said that, the few open source apps I've tried have generally sucked (except for Mozilla which is ugly but doesn't suck) So I prefer to play both sides half way. ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                                B Offline
                                B Offline
                                Brian Azzopardi
                                wrote on last edited by
                                #15

                                Senkwe Chanda wrote: I'm one of the (very) few people that believe Linux will overtake Windows sooner rather than later Really? Server-side prolly. On the desktop never. What proof do you have to support your belief? Senkwe Chanda wrote: few open source apps I've tried have generally sucked So you think apache sucks? Sendmail sucks? What open source apps did you try? bibamus, edamus, cras moriemur

                                [eat, drink, for tomorrow we die]

                                T S 2 Replies Last reply
                                0
                                • P peterchen

                                  Brian Azzopardi wrote: bashing open-source is a hobby for some people ME! ME! LET ME JOIN!!! I love to bash open source for lack of a serious business model (besides the Semi-SAS approach) and for their abuse of the word "free".


                                  You don't need to sleep to see a nightmare  Anne Clark   [sighist]

                                  B Offline
                                  B Offline
                                  Brian Azzopardi
                                  wrote on last edited by
                                  #16

                                  peterchen wrote: ME! ME! LET ME JOIN!!! You're proud you bash open source? :confused: You must be a pretty negative/depressed person. peterchen wrote: I love to bash open source for lack of a serious business model And it seems, misinformed too. There is no business in open-source so they don't need a model. peterchen wrote: their abuse of the word "free". If it has managed to escape your notice they actually define pretty well what they mean by "free". Go to gnu.org and read. bibamus, edamus, cras moriemur

                                  [eat, drink, for tomorrow we die]

                                  T P 2 Replies Last reply
                                  0
                                  • S Senkwe Chanda

                                    Brian Azzopardi wrote: It seems bashing open-source is a hobby for some people Err, yeah I do bash the GPL and Open Source quite a bit. But I bash MS just as much :-D For example, I'm one of the (very) few people that believe Linux will overtake Windows sooner rather than later, which doesn't bother me a bit. Having said that, the few open source apps I've tried have generally sucked (except for Mozilla which is ugly but doesn't suck) So I prefer to play both sides half way. ASP.NET can never fail as working with it is like fitting bras to supermodels - it's one pleasure after the next - David Wulff

                                    P Offline
                                    P Offline
                                    peterchen
                                    wrote on last edited by
                                    #17

                                    Senkwe Chanda wrote: except for Mozilla which is ugly but doesn't suck ... and is dereived from commercially developed sources. :cool:


                                    You don't need to sleep to see a nightmare  Anne Clark   [sighist]

                                    T S 2 Replies Last reply
                                    0
                                    • B Brian Azzopardi

                                      Senkwe Chanda wrote: I'm one of the (very) few people that believe Linux will overtake Windows sooner rather than later Really? Server-side prolly. On the desktop never. What proof do you have to support your belief? Senkwe Chanda wrote: few open source apps I've tried have generally sucked So you think apache sucks? Sendmail sucks? What open source apps did you try? bibamus, edamus, cras moriemur

                                      [eat, drink, for tomorrow we die]

                                      T Offline
                                      T Offline
                                      Tim Smith
                                      wrote on last edited by
                                      #18

                                      Sendmail sucks? :laugh::laugh::laugh::laugh::laugh: Very much so. Even Unix people agree it is a total hack job. QMail RULEZ!!!! :) Apache sucks? Much of it does. It is functionally great, but that isn't the whole story. It is a total nightmare to configure. But that is more of a legacy issue. The code generally does suck royally. But that tends to be very common for OSS and non-OSS. (What I have started calling "Code Spew") Tim Smith "Programmers are always surrounded by complexity; we can not avoid it... If our basic tool, the language in which we design and code our programs, is also complicated, the language itself becomes part of the problem rather that part of the solution." Hoare - 1980 ACM Turing Award Lecture

                                      B S 2 Replies Last reply
                                      0
                                      • C Chris Losinger

                                        who wants to bet whoever did it was employed or hired by MS? :) -c


                                        To explain Donald Knuth's relevance to computing is like explaining Paul's relevance to the Catholic Church. He isn't God, he isn't the Son of God, but he was sent by God to explain God to the masses.
                                           /. #3848917

                                        image effects!

                                        B Offline
                                        B Offline
                                        Brian Azzopardi
                                        wrote on last edited by
                                        #19

                                        Hehe :) I'm willing to bet it was not MS, but who knows? bibamus, edamus, cras moriemur

                                        [eat, drink, for tomorrow we die]

                                        1 Reply Last reply
                                        0
                                        • P peterchen

                                          Senkwe Chanda wrote: except for Mozilla which is ugly but doesn't suck ... and is dereived from commercially developed sources. :cool:


                                          You don't need to sleep to see a nightmare  Anne Clark   [sighist]

                                          T Offline
                                          T Offline
                                          Tim Smith
                                          wrote on last edited by
                                          #20

                                          ... and is dereived from commercially developed sources. Sing it brother!!!! It would be a total joke to claim OSS code suffers worse from "code spew" than commercial applications. Apache, sendmail, expat, quake, etc..., all suffer from the same problem of moronic programmers who actually believe this crap about "self documenting" code. An overwhelming amount of code I see is mostly just "code spew". Tim Smith "Programmers are always surrounded by complexity; we can not avoid it... If our basic tool, the language in which we design and code our programs, is also complicated, the language itself becomes part of the problem rather that part of the solution." Hoare - 1980 ACM Turing Award Lecture

                                          B 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups