3 ms·
How would you audit that their server is actually executing the open-source code that they say they are? The incentive for said server to, in certain cases or w
by btown 5y ago
How would you audit that their server is actually executing the open-source code that they say they are? The incentive for said server to, in certain cases or when detecting certain networks, also install a silent and subtle payload for future backdoor access (which every nation state has in its back pocket for a moment like this) is phenomenally high.
- bigcoffeeguy 5y agoNot to mention that any decent network firewall with up-to-date signatures would probably just end up blocking the “patch.”
- aaomidi 5y agoYou wouldn't. Just like there's nothing to guarantee they're not using this exploit right now as we speak.