3 ms·

Funny that you should mention Dutch tax law. I don't think it's controversial to say that some of those "exploits" were deliberately inserted. One may speculate

by Y_Y 2y ago

Funny that you should mention Dutch tax law. I don't think it's controversial to say that some of those "exploits" were deliberately inserted. One may speculate that there are also some powerful forces pushing for more vulnerabilities in consumer computing. Here are high-profile examples of each: https://en.wikipedia.org/wiki/Dutch_Sandwich https://en.wikipedia.org/wiki/Dutch_Sandwich https://en.wikipedia.org/wiki/Intel_Management_Engine#Assertions_that_ME_is_a_backdoor https://en.wikipedia.org/wiki/Intel_Management_Engine#Assert...

rustcleaner 2y ago
Barium-class downboats appear to be sinking your battleship! :^O
result2vino 2y ago
[dead]
saagarjha 2y ago
Think again.
- Y_Y 2y ago
  I'd be happy to, world you like to offer a suggestion?
  - saagarjha 2y ago
    As long as I don't see you joining the usual "duh this is a government backdoor" crowd next time any bug comes up, sure. This blog post describes a class of vulnerabilities. That's why there are ten of them. A well-resourced adversary with the capability to influence software development would want their backdoor to be small and difficult to discover. In many cases they would like guarantees that they are the only entity to be able to abuse such a vulnerability. While one can argue that these bugs were difficult to find–they were only fixed now–they really aren't very good backdoor bugs. Why leave dozens of holes all over the place when you only need a few? It's much more likely that this is just a failure case that someone failed to consider.