8 ms·

"They're not so arrogant about their code being bulletproof that" The source-code reviews by foreign states are not about checking to see 'if it works' - it's

"They're not so arrogant about their code being bulletproof that" The source-code reviews by foreign states are not about checking to see 'if it works' - it's about checking that it doesn't include inserts from NSA etc.. This has nothing to do with 'security review' in the general sense of robustness, it's a 'state actor' thing. I don't see how there is a way around this. It's doubtful that Russia will allow them to sell this stuff without reviewing it - and the reverse is true as well - Russian state actors will surely use this 'review' as an opportunity to embellish their own hacking tactics etc.. I don't see any real way around this in the world in which we live. Russians are going to have to make their own anti-virus. Which I would imagine they are capable of doing.

kl4m 9y ago
Well, Kaspersky Lab is a russian company.
- nunobrito 9y ago
  Interesting enough, the CEO of Kaspersky already offers the source code for review in the US: https://www.engadget.com/2017/07/02/kaspersky-lab-offers-source-code-to-gain-trust/ https://www.engadget.com/2017/07/02/kaspersky-lab-offers-sou... Can't speak for the US, here in Germany the Kaspersky tools are used on large companies responsible for critical infrastructure. With the option for source code review, I'm still with a good impression on their tools when compared to Symantec and no option for review.
  - Nimitz14 9y ago
    > Can't speak for the US, here in Germany the Kaspersky tools are used on large companies responsible for critical infrastructure. That is a terrible idea, as anyone who knows anything about Russia would tell you.
    - alexasmyths 9y ago
      Ya. Using American software, you might be getting NSA's eyes on you. Using Russian software, you'll probably have FSB's eyes on you. So take your pick :)
      - mythrwy 9y ago
        Would you rather be East Germany or West Germany?
      - PeterisP 9y ago
        Even in that sense, choosing is quite simple, since for all kinds of gov't usage (e.g. in military as a NATO country) NSA is an ally of Germany but FSB is actively hostile to it.
    - nunobrito 9y ago
      Germany shares closer and deeper ties with both countries than most would imagine in modern days. Propaganda aside and looking at facts, one company is providing access to review their source code and the other one is not. Which one of them is a terrible idea to purchase?

kl4m 9y ago

Well, Kaspersky Lab is a russian company.

nunobrito 9y ago
Interesting enough, the CEO of Kaspersky already offers the source code for review in the US: https://www.engadget.com/2017/07/02/kaspersky-lab-offers-source-code-to-gain-trust/ https://www.engadget.com/2017/07/02/kaspersky-lab-offers-sou... Can't speak for the US, here in Germany the Kaspersky tools are used on large companies responsible for critical infrastructure. With the option for source code review, I'm still with a good impression on their tools when compared to Symantec and no option for review.
- Nimitz14 9y ago
  > Can't speak for the US, here in Germany the Kaspersky tools are used on large companies responsible for critical infrastructure. That is a terrible idea, as anyone who knows anything about Russia would tell you.
  - alexasmyths 9y ago
    Ya. Using American software, you might be getting NSA's eyes on you. Using Russian software, you'll probably have FSB's eyes on you. So take your pick :)
    - mythrwy 9y ago
      Would you rather be East Germany or West Germany?
    - PeterisP 9y ago
      Even in that sense, choosing is quite simple, since for all kinds of gov't usage (e.g. in military as a NATO country) NSA is an ally of Germany but FSB is actively hostile to it.
  - nunobrito 9y ago
    Germany shares closer and deeper ties with both countries than most would imagine in modern days. Propaganda aside and looking at facts, one company is providing access to review their source code and the other one is not. Which one of them is a terrible idea to purchase?