<div dir="ltr">THis is a second essay<div><a href="http://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance">http://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance</a><br>
</div><div><br></div><div>and the short article is here</div><div><a href="https://www.schneier.com/blog/archives/2013/09/the_nsa_is_brea.html">https://www.schneier.com/blog/archives/2013/09/the_nsa_is_brea.html</a><br></div>
</div><div class="gmail_extra"><br clear="all"><div><div dir="ltr">Ram<br>_________________________________________________________<br><a>Himal Prakriti - Information on Uttarakhand Floods and Post Flood Scenario</a><br>
<a>Amazing Indians: Transforming lives in the hills </a><br>
<a>Homestay with a difference</a><br><br></div></div>
<br><br><div class="gmail_quote">On Sat, Sep 7, 2013 at 2:59 PM, Ramnarayan.K <span dir="ltr"><<a href="mailto:ramnarayan.k@gmail.com" target="_blank">ramnarayan.k@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi<div><br></div><div>I know some of the list members are with Canonical and some others are concerned with security.</div><div><br></div><div>The essay linked here</div><div><a href="http://www.theguardian.com/commentisfree/2013/sep/05/government-betrayed-internet-nsa-spying" target="_blank">http://www.theguardian.com/commentisfree/2013/sep/05/government-betrayed-internet-nsa-spying</a></div>
<div><br></div><div>has this statement</div><div><b><i><br></i></b></div><div><b><i>"<span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:14px;line-height:18px">We can make surveillance expensive again. In particular, we need open protocols, open implementations, open systems – these will be harder for the </span><span style="padding:0px;margin:0px;border-collapse:collapse;color:rgb(51,51,51);font-family:arial,sans-serif;font-size:14px;line-height:18px;background-repeat:no-repeat no-repeat"><span style="padding:0px;margin:0px;border-collapse:collapse;background-repeat:no-repeat no-repeat"></span>NSA</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:14px;line-height:18px"> to subvert."</span></i></b></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">So what is the relevance of Linux in general and of specific distributions. I can foresee it being easy for distributions to be bullied into putting in place backdoors in their OS. Will this be easier to "catch" by the larger community or will it slip through .</span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">The ordinary linux user - even the normal geek is going to head to the nearest OS distribution servers to downlond the OS and the packages from the repos - so how difficult would it be to engender trust in a distributions "official repos"</span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">Are there independent reviews of the code base for different Linux distributions. </span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">Seems to me that those paranoid about security would head towards compiling from source or get it from repos that are much viewed and used across many distributions (like the debian base) </span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">look forward to hearing more thoughts on this</span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br></span></font></div><div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px">meanwhile google has yet more mail to crunch with NSA + Security + Linux being bandied about in a mail :-)</span></font></div>
<div><font color="#333333" face="arial, sans-serif"><span style="font-size:14px;line-height:18px"><br clear="all"></span></font><div><div dir="ltr">Ram<br>_________________________________________________________<br><a>Himal Prakriti - Information on Uttarakhand Floods and Post Flood Scenario</a><br>
<a>Amazing Indians: Transforming lives in the hills </a><br><a>Homestay with a difference</a><br><br></div></div>
</div></div>
</blockquote></div><br></div>