4 ms·

> including bugdoors Is a bugdoor a factory backdoor implemented via an intentional bug? Is the idea to give plausible deniability if the backdoor gets found?

• neilv 3y ago
  Yes, I heard this concept alleged publicly ~25 years ago. I've only heard the "bugdoor" term within the last few years. The first time I heard the idea, someone was claiming publicly that a manager/lead at a tech vendor had been approached by a government, and asked to insert a backdoor that would look accidental, and without the larger organization aware. That might've been apocryphal, but the idea was plausible. The idea is maybe received a bit differently today, when there's a ton more people doing work, by a ton of developers who haven't had correctness and security prioritized. Even some of the key bits of tech infrastructure, by some the largest tech companies, seem to think weekly security updates, for multiple CVEs each, isn't insane. "Uh, you want us to make a security vulnerability, and make it look like it was because we were negligent? If you can wait a week, I can give you a dozen all-natural ones."