2 ms·
No, you can't trust it. Just as TOR requires special scrutiny because the US Navy provides something like 2/3 of its funding, SELinux requires special scrutiny
by leashless 13y ago
No, you can't trust it. Just as TOR requires special scrutiny because the US Navy provides something like 2/3 of its funding, SELinux requires special scrutiny because people who want to read your email provide it.
The NSA would not trust code provided to it for free by the Russians. You should not trust code provided to you by the NSA.
However, there's a pretty good chance that SELinux does what it says on the tin, and they're releasing it because:
1) It helps keep the Chinese out of some low-level secure systems
2) It does not keep the NSA out of anything they care about
But security is not just about code, it's about intention, politics, systems, side-effects and so on.
We're all living in a spy thriller now, where unseen people watch our every move online, and use vast machines to correlate our profiles with their ideas of risk. That's the live that you and I live.
Paranoia is normal.