A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

learn more… | top users | synonyms

158
votes
6answers
18k views

Apple's open letter - they can't or won't backdoor iOS?

Apple released an open letter to the public outlining their reasons for not complying with the FBI's demands to modify the iPhone's security mechanism. Here's a summary: The FBI has an iPhone in ...
21
votes
1answer
14k views

Is this a backdoor?

I found the code below on my customers site. It looks like a typical backdoor hidden with hexadecimal, but I'm not 100% sure. <?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($...
24
votes
1answer
8k views

Consequences of tampered /etc/ssh/moduli

What are the consequences if an attacker is able to modify the /etc/ssh/moduli file?
11
votes
3answers
1k views

Why can't apple simply add the backdoor now and then remove it after the FBI is done?

Summary of the current situation by @TTT Apple released an open letter to the public outlining their reasons for not complying with the FBI's demands to modify the iPhone's security mechanism. ...
46
votes
6answers
7k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies (e....
4
votes
3answers
420 views

BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?

How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices? However these devices firmware often offer a proprietary ...
86
votes
7answers
5k views

How do I know a piece of software only does what the author claims?

Without being a programmer or a computer expert, how can I know if a particular program or any piece of software in general doesn't have hidden unwanted functions compromising privacy and security?
2
votes
1answer
202 views

Could someone help me deobfuscate this malicious script code [duplicate]

Two months ago one of our Wordpress sites was infested through and through. This was at the same time I started working at this company. Our main platform is Plone, but I guess they did some on the ...
4
votes
2answers
257 views

Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?

So to be clear right-off-the-bat: I think re-designing modern encryption to include governmental "backdoors" is, on balance, a quite bad idea, for any number of good reasons. Nor (FWIW) do I actually ...