3 ms·
The "it will be found and abused" argument is wrong on so many levels. Let's start with the facts: - All modern software in fact has a public well known backdo
by bronzeage 9y ago
The "it will be found and abused" argument is wrong on so many levels. Let's start with the facts:
- All modern software in fact has a public well known backdoor.
- That backdoor is called the private key for software updates.
- Despite being well known feature, no criminals have abused it so far, and we consider it completely safe.
- The argument of "it can't be done" is actually null and void. It was already done and even implemented.
- Why do you trust those companies more than your government. I don't see how a corrupted cop is more likely than a corrupted developer. Being a developer obviously makes your point of view biased.
- Where the government can be limited by whatever laws you choose to implement, those companies and their security practices are entirely up to them.
- It's not a question of whether it's possible, it's a question of whether it should be done, and if so how.
- Open source is not much more trustable. End of the day most of the sane people do not recompile every binary, and with CVEs and security patches coming all the time you still need someone to provide the updated binaries.
- bronzeage 9y agoP.S. If you really are overly paranoid about the government, you should've assumed the NSA actually have all those private keys, but they reserve it for the most critical cases and only select few know it. You would also assume the russians / china have access to that because you're overly paranoid and everything can be breached, and they don't care about these companies being american.