Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: Sami N??t?nen <sn.ml@××××××××.com>, Gentoo Developers <gentoo-dev@l.g.o>
Subject: Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage.
Date: Fri, 26 Mar 2004 21:51:00
Message-Id: 20040326214757.GA3436@curie-int.orbis-terrarum.net
In Reply to: Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage. by "Sami Näätänen"
1 On Fri, Mar 26, 2004 at 10:58:43PM +0200, Sami N??t?nen wrote:
2 > The master keys could be kept totally outside of the net too so only way
3 > to compromise those is to get physical access. Simple script that
4 > automatically generates a bunch of new keys when an USB mem card is
5 > inserted is pretty easy to make. And because the computer that would do
6 > this is in no danger to be exploited through network it really doesn't
7 > need to be updated. And if one gets physical access to the machine
8 > he/she can also get physical access to the user so it doesn't matter.
9 Nope, all I'd have to do is crack the machine that it gets inserted
10 into, and leave a trojan behind that sits waiting for the mem card to be
11 inserted.
12
13 --
14 Robin Hugh Johnson
15 E-Mail : robbat2@××××××××××××××.net
16 Home Page : http://www.orbis-terrarum.net/?l=people.robbat2
17 ICQ# : 30269588 or 41961639
18 GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85

Replies

Subject Author
Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage. "Sami Näätänen" <sn.ml@××××××××.com>