3 ms·
How could you consider a closed-source program with some amazing obfuscation to be even remotely secure? http://www.secdev.org/conf/skype_BHEU06.handout.pdf ht
by ivank 18y ago
How could you consider a closed-source program with some amazing obfuscation to be even remotely secure?
http://www.secdev.org/conf/skype_BHEU06.handout.pdf http://www.secdev.org/conf/skype_BHEU06.handout.pdf
- ntoshev 18y agoThanks for the doc, it's interesting. However it complains mostly about Skype being opaque from an admin point of view. I don't buy your view on software security (I know it is the prevalent one). I don't crash-test my Volvo in order to ensure it is (relatively) safe, I rely on public mechanisms for this: I trust the manufacturer to live up to his promises (or suffer reputation damage, lawsuis, etc) and NCAP tests as an objective external measure. It's a pity an equivalent of NCAP does not exist for software. Perhaps a startup can fix this.
- wmf 18y agoUnregulated, unaudited, free products that few people are qualified to understand are a disaster waiting to happen. http://www.schneier.com/blog/archives/2007/04/a_security_mark.html http://www.schneier.com/blog/archives/2007/04/a_security_mar...