3 ms·
Well, I guess, the source code sooner or later is accessible to _somebody_ at _some_ development stage or in _some_ version. But can we really trust companies
by kimlelly 13y ago
Well, I guess, the source code sooner or later is accessible to _somebody_ at _some_ development stage or in _some_ version.
But can we really trust companies that work with the NSA to sell us the version compiled _without_ the backdoors?
Plus, always keep in mind that these companies have lied to us about PRISM - with straight faces.
- maggit 13y agoWhile it is not technically impossible to discover backdoors in closed source software, I'd say it's essential for me to trust crypto-software that it is open source. That being said, it is probably feasible to hide a backdoor even in open source software. But it is still easier in closed source software.
- tptacek 13y agoBy "closed-source", I meant "researchers don't have the source code". And yet they find vulnerabilities anyways. It's not 1995 anymore. Vulnerability researchers tend to have pretty good tools for reading assembly.