3 ms·
> you would have no way of telling the difference If only specific individuals are targeted, I agree. But if it's pushed to all users, wouldn't we expect a res
by hunter2_ 1y ago
> you would have no way of telling the difference
If only specific individuals are targeted, I agree. But if it's pushed to all users, wouldn't we expect a researcher to notice? Maybe not immediately, so damage will be done in the meantime, but sooner than later.
- SV_BubbleTime 1y agoHow long was HeartBleed exploitable? How many people looked at that code? Now, take the source away and make the exploit intentional.
- michaelt 1y ago> But if it's pushed to all users, wouldn't we expect a researcher to notice? Think of the security a games console has - every download arrives encrypted, all storage encrypted, RAM encrypted, and security hardware in the CPU that makes sure everything is signed by the corporation before decrypting anything. To prevent cheating and piracy. Modern smartphones are the same way. We can't expect independent researchers to notice a backdoor when they can't access the code or the network traffic.