3 ms·

Interesting. After seeing the gloves come off in the last month or so, it hit me just this morning that one could make the case for it being a bad idea to have

Interesting. After seeing the gloves come off in the last month or so, it hit me just this morning that one could make the case for it being a bad idea to have a system with root access to thousands of US systems in Russian jurisdiction.

mattnewton 9y ago
It boggles my mind they don’t require source files for things running with administrative privledges on government computers, so they can audit it and then compile it themselves. Though in this case it wouldn’t have helped, because apparently the information was brought home to a personal computer.
- uptown 9y ago
  That's actually a recent development: http://fortune.com/2017/07/02/kaspersky-source-code-inspection/ http://fortune.com/2017/07/02/kaspersky-source-code-inspecti...
  - 1001101 9y ago
    Wouldn't the source on such a system change daily? How do you keep up with updates?
    - mattnewton 9y ago
      By auditing the diffs daily? Code review but by someone on the US government’s payroll.
- strictnein 9y ago
  The UK has a program that does just that, especially in regards to networking/telecom hardware and software from China.