4 ms·
> ...is there a feasible way to verify there aren't backdoors in infrastructure hardware like this other than manufacturers open sourcing (this doesn't mean ope
by ardy42 6y ago
> ...is there a feasible way to verify there aren't backdoors in infrastructure hardware like this other than manufacturers open sourcing (this doesn't mean open licensing) software, firmware, microcode, chip designs, board designs, and compilers so researchers can see what you did and verify production matches the source?
Even open sourcing all that wouldn't necessarily be enough to verify the non-existence of a backdoor. IIRC, clever back doors are deliberately designed to look like unintentional 0-day security flaws.