3 ms·
How can we know there's no backdoor in it?
by galaxyLogic 7y ago
How can we know there's no backdoor in it?
- baby 7y agoI don’t think it’s a bad question and don’t see why this is being downvoted. Security can only scale via one’s network, and if you don’t have any it can be hard to figure out what’s secure and what’s not! FWIW a little googling and you can see that filippo is pretty well known in the security/crypto community for positive contributions, same goes on for tqbf who’s all over this thread endorsing the tool. I would also trust the thing without looking at it, but I might take a look at the code someday to see what’s going on :)
- yellow_lead 7y agoIt seems you can read the source code?
- pknopf 7y agoIt's OSS?
- coldtea 7y agoYeah. So all you need is a 10+ year experience in crypto algorithms and weeks of close inspection of the code to verify it!
- smrq 7y agoSooo you need to trust someone that does have that experience to do the verification. What alternative are you suggesting? Is there some cool way to write your crypto so that a layman can successfully verify the integrity of a binary?
- galaxyLogic 7y ago> What alternative are you suggesting? One solution might be if some big corporation or even a government, or why not Bill Gates himself, offered a big ongoing bug-bounty for this Open Source Software.