3 ms·
My interpretation is: "Without the source code, there is no way of telling if it actually is robust or not, regardless of what they say"
by mda 15y ago
My interpretation is: "Without the source code, there is no way of telling if it actually is robust or not, regardless of what they say"
- daeken 15y agoYes, yes you can. Robustness isn't determined by auditing -- we know this doesn't work in practice. Robustness is determined by beating on it and seeing how it breaks; this is the point of heavy testing, including fuzzing in the case of drivers. You absolutely don't need source for this.