16 ms·
> You don't need source code to verify the behaviour of a binary. Not even a died-hard cybersecurity reverse engineer would ever say, “you don’t need source co
by egberts1 3y ago
> You don't need source code to verify the behaviour of a binary.
Not even a died-hard cybersecurity reverse engineer would ever say, “you don’t need source code to verify the behaviour of a binary”, but it would make life easier to verify seldom-used or unused code for non-maliciousness.
- mjg59 3y agoSource code alone can never provide proof of non-maliciousness. Reflections on Trusting Trust demonstrated that almost 40 years ago.