4 ms·
> Huawei can address the security concerns by using established open source software (which they seem to have). If you don't trust the entity publishing the bi
by natmaka 7y ago
> Huawei can address the security concerns by using established open source software (which they seem to have).
If you don't trust the entity publishing the binaries, then having it simply publishing sourcecode is not a way for you to gain confidence because there is no practical way to be sure that the binaries they deliver are the published code compiled by a non-modified version of an opensource compiler.
They have to provide a way to do reproducible builds.
https://reproducible-builds.org/ https://reproducible-builds.org/
There is also a huge challenge when it comes to enable the customer to audit the hardware.