humanityANDpeace

thank you

@Pandya btw you got a nice user-profile thing with the info about GNU software free libre. I like libre software.

only I was looking for a way to use sudo directly with a "flat/feature" to mean "clean the environment"

I think the answer to the question is merely that an cannot instruct sudo to "keep quiet/ not polute the env", instead one should do as you just say, reverse them. And if you look in the question of mine again, that is what I implied as possible workaround

exactly ! printenv called directly after env -i is clean

another way to look at the sudo-caused-env-polution is diff <(env -i sudo -E /bin/printenv) <(env -i /bin/printenv) -y

hi @Pandya . thanks and that is exactly what I get myself

and yahoo there is also this answer from @Thomas Pornin which I think is really nice and helpful !!! Thakn you!

By the way, this answer does not strike me to be particularily correct, security.stackexchange.com/a/40265/13609

Also considering hardware backdoors I think it is a valid assumption to say that if anybody attempting that , then this must be a resourceful actor. Therefore NSA and alike are somewhat in there and to be considered. Making it a "taboo" seems not helpful to me.

@TerryChia Oh I am sick of it too! But that does not help the problem being there does it? Surely it would be neat to pretend that there is nothing to worry about, does it give you better preparedness, beter security? I mean I really also hate this repetetive use of the NSA name, Some 5 month ago most idios did not even know that acronym, now everybody uses it and it angers that some claim expterise by just saying.".. ohhhh i know the NSA...."

@LucasKauffman thanks for the explaination.

@TerryChia What do you mean by "I'll rip out anything regarding the NSA...". Why would you be so categorial? Is there no chance that NSA might be something to consider when dealing with IT-security? This seems not logic to me, maybe you can explain what you meant by that, since it interest me

@LucasKauffman @TerryChia Any suggestion how there could be a question / answer that would give some highlight to the issue of hardware backdoors, that could be accepcted / received more welcome in the IT_Security SE?

@LucasKauffman What would require speculation here? The Chinese router thing would give a proof-of-concept. Only saying that there is a backdoor indeed already there is speculative. The fact that it could be designed in seems far less up to speculation.

@LucasKauffman given the Chinese router "prove" what speaks against answering the OP question? to have it clear that there is a risk. At present the downvote kind of hides the risk and makes me (though I do not care for that too much) simply look like a wierd, unreasonable person,,, Still the question could be with a tendency be answered with "yes hardware backdoor is possible"

@TerryChia But it takes lots of effort and expertise to get to the places this data was flowing through. I do not think it is trivial to get this setup. I am rather optimistic about the potential of further things. I cannot tell but it seems that there are lots of resources. If I was NSA official -decision-maker I would definitively consider the options in hardware hacking and as it seems to me it is totally doable

@TerryChia follow up questions. Asked 10 month ago you would have believed that NSA saves all traffic in Utah? Because if not we might just make the mistake of underestimating them again

right?

@LucasKauffman thank you for the example. Still seems to me that if Apple ir Samsung might be "ok" with a attack then there is nothing there that will be discovered. At least not by any actual user

is also controll

@TerryChia Because they can! And because its better then having data scooped up only

Is quality checking a cpu that easily done? the structures are minute and very small... I wonder if there are many able to do such a checking. With only a few being able it would again be perfect.. because small number of persons to "convince" to let the attack pass by unoticed ;)

@LucasKauffman Please explain. what do you mean by home company?

I assume that a normal script virus is inferior (detecable/defeatable) to a rootkit. This again to a bluebill hypervizer virutalization rootkit and this yet again to a hardware attack. If I was as rich as the NSA/BND etc etc etc. I would know how and where to pull the triggers :)

@LucasKauffman I do not contest the idea that it is hard / problematic. This actually even demonstrates how worthwile it is to attack on the hardware level. Escape is very difficult and detecting as well

I assume?

surely greater variety of CPUs would make a hardware backdoor covering most everybody harder

@TerryChia I agree , but it was not perfromance I want to achieve. I also need a tradeoff for security

or Transmeta

@TerryChia ARM

@TerryChia Appreciate your input - as already said sometimes before thank you. Still I wonder why just because it would be so terrible it should not be addressed in a question. The answer could be. Yes it is possible and it would be difficult to do this. This would suffice to get a right idea. Many people would have a better idea then they might have had before,

@HamZa Know that is good to know your opinion. But this is stated in a chat and will not be accessible to all those searching the IT-Security SE site. I think having a question addressing the hardware trickery / tempering etc etc would reflect well the risks also to be addressed there. What is your opinion?

@LucasKauffman great. So the offer stands when you are in town, we should have a beer or tow. My own brew will still take some 3-4 weeks fermenting though, but you might know that there is no problem to get good beer from else places here in Berlin :)

@LucasKauffman any chance you are close to Berlin? I'd invite you

@LucasKauffman beer is good :) just about to brew some here

Therefore I do not totally understand the objections made to the question. Surely there can be tons of question you like more. But I assume there is an answer to the question and I cannot see why IT-Security SE would not be a good place to have this question and answered

@LucasKauffman anyways I wanted to enter a "chat" as suggested by you just to not bloat the comments below the question "as defacto chatting". Just wanted to convey that for me IT-Security is a place to look up information about IT-Security and if or if not hardware can be the mean of a backdoor is for me (as a non-expert) a valuable information

@LucasKauffman I do not know you to that well. I guess not liking you would require to get to know you a bit more.

PLEASE HELP: Do you guys recommend repost the question on meta?

I have actually by intention put it on meta to get some input on how to ask the issue of different systems to administer servers (parallels vs ssh-login)

haha :) somebody moved my question from meta to webmasters.stackexchange.com, that was nice but now it got closed down :(.

@HackToHell: thanks for the ice!°

@Sathya I am sorry this became personal I wish I was not so pissed of by the action I have seen from you

@JourneymanGeek And after all the question concerned is not at all unaswerable and to my opion quite important

If the mod @saytha thinks he does so, HELL then there will be only those anying how to get my DRIVER XYZ answers left, but not that maybe need answer

@JourneymanGeek I think it is wrong for me to do so, this way I would just acknowledge the unfair power of Sathya, which I do not wanna do

@JourneymanGeek thank you for the hint wiht the 5 persons and meta.