[Reproducible-builds] Juniper ScreenOS backdoor

Steven Chamberlain steven at pyro.eu.org
Mon Dec 21 21:42:18 UTC 2015

Steven Chamberlain wrote:
> I uploaded the firmwares here but I think something broke... it has been
> "in queue, please wait" for over an hour :(  The files were 25MB each.
> https://try.diffoscope.org/quvzskqbuysh

Okay, I did eventually finish.  As suspected, diffoscope (or file or
binutils) don't know how to disassemble this automatically, and neither
do I.  The ssh500*.bin files should be x86 code, already decompressed.

The differences are too numerous for diffoscope to show all of it
anyway.  I guess Juniper didn't implement reproducible builds yet ;)

Steven Chamberlain
steven at pyro.eu.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20151221/ddffd3d8/attachment.sig>

More information about the Reproducible-builds mailing list