3 ms·

I know it's obvious. The point is that some tens of HCSEC staff (mostly Huawei employees) thoroughly "vetting" tens of millions of lines of Huawei code for back

by roca 8y ago

I know it's obvious. The point is that some tens of HCSEC staff (mostly Huawei employees) thoroughly "vetting" tens of millions of lines of Huawei code for backdoors would prove nothing, even if it wasn't ludicrous, which it is.

acqq 8y ago
> would prove nothing It could surely prove something: those are reproducible builds. That means you can prove after some breach is detected that it originates from the given sources, if it is so. That in turn means that if something happens it won’t be Huawei employees who would investigate these sources. I’m sure that once a company offers the sources like this the company itself won’t plan to mess with the sources. Because then the unwanten intervention can be proved.