3 ms·
If it's connected to the internet, then it can send info to home base. The only way around this is code that's simple enough to audit and understand. That ship
by ori_b 8y ago
If it's connected to the internet, then it can send info to home base. The only way around this is code that's simple enough to audit and understand.
That ship sailed long ago for browsers -- if you care about auditability, you can't trust the web.
- nickpsecurity 8y agoExactly. I'll go further in saying a system or software should be considered insecure if it connects to Internet and wasn't designed/implemented with strong security. That's most stuff.
- ori_b 8y agoThat's a red herring. We're not discussing a security bug -- the system is working as designed. The problem is that the goal is not desirable, and the standards and code are complex to the point that an independent implementation is intractable.