4 ms·
One comment I found interesting: "And I didn’t check the source [of OpenBSD] for trojans or backdoors. Do I trust Theo DeRaadt that much? Not particularly, tho
by billybob 15y ago
One comment I found interesting:
"And I didn’t check the source [of OpenBSD] for trojans or backdoors. Do I trust Theo DeRaadt that much? Not particularly, though I have nothing against him. Do I trust “the community”? No. Mostly I just didn’t care at all."
I agree that in practice 1) it's not practical for anybody to audit an entire OS for security and 2) you don't know everyone in the community.
However, I think it's reasonable to feel safer using software that's audited and trusted by brilliant libertarian nutjobs than software that isn't. And if you truly DID need to know that a product didn't contain back doors, and it was worth enough money to you, you could hire people to audit it and stick to the specific version that you'd audited.
Most people don't care about this stuff. But I like knowing that some people do; that push come to shove, when your government becomes a tyranny, there ARE tools that are beyond their reach. And in many parts of the world, tyranny is not theoretical.