3 ms·
What was even the game here? Eventually even more backdoors, ones that would have more plausible deniability? Afaict neither the oss-fuzz nor this change would
by pxx 3y ago
What was even the game here? Eventually even more backdoors, ones that would have more plausible deniability? Afaict neither the oss-fuzz nor this change would actually discover the found backdoor.
But why put your backdoor eggs into one basket (library)?
- bayindirh 3y agoThe library is entrenched enough, trusted enough, and its main developer has long internet breaks because of mental health problems. Plus, you do not backdoor the library itself, but the tools using it. "Reflections on trusting trust" style. Sounds like a perfect plan, until it isn't.
- dagmx 3y agoWho says it was just the one library though?