3 ms·
"Reverse engineering a specific version [every version?] of a private binary is a reasonable burden of proof for users to undertake in order to feel confident
by WaxProlix 6y ago
"Reverse engineering a specific version [every version?] of a private binary is a reasonable burden of proof for users to undertake in order to feel confident in the encryption used by their comms"
What? I usually agree with your takes but this seems out there (or did I misread/mischaracterize it)
- statictype 6y agoYou would still have to audit every the code of every released version right? Reverse engineering is obviously more difficult but someone with the right skills and tools would find it a straightforward task. Also - unless you are somehow also inspecting their CI/CD toolchain, there's no guarantee that the source being inspected matches the binaries being released - so you would need to reverse the binaries anyway.