2 ms·
When I read the headline, my brain first parsed it as a scandal breaking, then I read the article and found that it was not that. I just hope the open source c
by stakhanov 7y ago
When I read the headline, my brain first parsed it as a scandal breaking, then I read the article and found that it was not that. I just hope the open source community will be very serious about auditing that code and not accept any blobs coming from people affiliated with the NSA.
- unnouinceput 7y agoYour brain was correct...something like 5 years before correct. I bet in 5 years this will be a scandal breaking because whatever NSA code gets adopted, it will be unveiled later as a backdoor.
- kryptiskt 7y agoIf the NSA wanted to add a backdoor, they would likely not do it in a patch openly contributed by them.
- stakhanov 7y agoIt's probably more subtle than that: coreboot is a hodgepodge of open source aspects and oblique blobs that contain god knows what. That's why libreboot exists (shares a lot of coreboot code but doesn't allow blobs). If the NSA wants to do some dirt, then the dirt will probably go into the blobs and/or happen as a result of how the open source code interacts with the blobs in ways that are not obvious to anyone who doesn't know what's in the blobs. So I can see how getting some influence in the coreboot community would be of strategic value to them to implement schemes to weaken IT security for whoever they want to weaken it for.