3 ms·
> strongest products ever made were high-assurance closed source Because we never found the backdoors put in place by the developers does not mean they were no
by zanny 11y ago
> strongest products ever made were high-assurance closed source
Because we never found the backdoors put in place by the developers does not mean they were not there, and without source access we have absolutely no reason to believe anyone when they say there are none.
- nickpsecurity 11y agoHigh assurance prevents that by full specs of all success and failure states, modular code, avoidance of dangerous constructs, covert channel analysis, testing of execution paths, pentesting with source, and so on. You could conceivably slip a backdoor in with extra cleverness sure. Yet, whether OSS or closed, you depend on talent of reviewers to find it for you. High-assurance closed has most labor put into that. That's why it was more secure. Aside from activities described above that were mandatory for high assurance security but optional or ignored for the rest.