Stories
Slash Boxes
Comments

SoylentNews is people

Dmitry Bogatov (Debian Package and TOR Exit Node Maintainer) in Custody

posted by on Wednesday April 19 2017, @12:46PM   Printer-friendly
from the only-the-NSA-maintains-TOR-exit-nodes dept.

Soylentbob writes:

First things first: The Missing Link!

Dmitry Bogatov (maintainer for several Debian packages and a TOR exit node) was arrested in Moscow, accused of endorsing violence and mayhem. The Debian project reacted by - besides giving their moral support - revoking access rights based on his private key as a precaution, in case the key gets compromised.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Dmitry Bogatov (Debian Package and TOR Exit Node Maintainer) in Custody | Log In/Create an Account | Top | 33 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 5, Interesting) by VLM on Wednesday April 19 2017, @03:12PM (1 child)

    by VLM (445) Subscriber Badge on Wednesday April 19 2017, @03:12PM (#496342)

    can he be considered compromised against his will?

    Debian has always been a security theater OS where the devs "need" 4096 bit keys despite source code coming from shar archives on usenet or rando ftp sites (sure most is guithub/gitlab now a days, but ...). Also they let in systemd, for goodness sakes. Default configs don't look like secure secure shell (or didn't recently)

    https://stribika.github.io/2015/01/04/secure-secure-shell.html [github.io]

    Its hard to decide is spending time in prison would make security theater apply or not.

    Starting Score:    1  point
    Moderation   +3  
       Interesting=3, Total=3
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   5  

  • (Score: 2) by butthurt on Thursday April 20 2017, @08:53AM

    by butthurt (6141) on Thursday April 20 2017, @08:53AM (#496761) Journal

    > source code coming from shar archives on usenet or rando ftp sites

    If it's been read by someone competent in the language, that can mitigate the fact that it changed hands in an insecure way. Not to say that the Debian maintainers necessarily do such auditing.