4 ms·

Is the only alternative to using software that the NSA may have infiltrated to use FOSS? Seems like there has to be other options. Can anyone suggest any?

deleted 13y ago
[deleted]
zurn 13y ago
If you just want source code reviewability you can use a restrictive license for the source. IIRC some vendors of sensitive software have done this. FOSS or open source ode doesn't stop NSA infiltration though. See http://underhanded.xcott.com/ http://underhanded.xcott.com/ for some techniques...
oscargrouch 13y ago
One that is closed, but you are the guy maintaining it, so you know whats in the source code? But seriously, transparency is the best bet..
logn 13y ago
> Is the only alternative to using software that the NSA may have infiltrated to use FOSS? Yes.
maxk42 13y ago
What's wrong with FOSS?
JumpCrisscross 13y ago
I would think open-source, minus the "free software" bit, is good enough. Freedoms 0 and 1, i.e. "freedom to run the program for any purpose" and "freedom to study how the program works, and change it to make it do what you wish" are reasonable. Given how software is taking on more and more critical functions, the days of closed-source software may one day seem quaint. Freedoms 2 and 3, i.e. "freedom to redistribute copies so you can help your neighbor" and "freedom to improve the program, and release your improvements (and modified versions in general) to the public, so that the whole community benefits" appear more problematic. http://en.wikipedia.org/wiki/Free_software#Definition http://en.wikipedia.org/wiki/Free_software#Definition
- hdevalence 13y ago
  Freedoms 2 and 3 seem to be necessary for when you find errors in the software (in particular, bugs that cause security vulnerabilities).
- rbanffy 13y ago
  Freedoms 2 and 3 are necessary to ensure long-term maintenance of the software. If they are absent, once the company who creates it dies, the software dies with it.
rbanffy 13y ago
> Is the only alternative to using software that the NSA may have infiltrated Actually, no. The NSA has not infiltrates each and every proprietary software publisher. It is, however, the only way to run software you can trust. Even if your software provider was not infiltrated by the NSA, it can be infiltrated by other entity.

deleted 13y ago

[deleted]

zurn 13y ago

If you just want source code reviewability you can use a restrictive license for the source. IIRC some vendors of sensitive software have done this. FOSS or open source ode doesn't stop NSA infiltration though. See http://underhanded.xcott.com/ http://underhanded.xcott.com/ for some techniques...

oscargrouch 13y ago

One that is closed, but you are the guy maintaining it, so you know whats in the source code? But seriously, transparency is the best bet..

logn 13y ago

> Is the only alternative to using software that the NSA may have infiltrated to use FOSS? Yes.

maxk42 13y ago

What's wrong with FOSS?

JumpCrisscross 13y ago

I would think open-source, minus the "free software" bit, is good enough. Freedoms 0 and 1, i.e. "freedom to run the program for any purpose" and "freedom to study how the program works, and change it to make it do what you wish" are reasonable. Given how software is taking on more and more critical functions, the days of closed-source software may one day seem quaint. Freedoms 2 and 3, i.e. "freedom to redistribute copies so you can help your neighbor" and "freedom to improve the program, and release your improvements (and modified versions in general) to the public, so that the whole community benefits" appear more problematic. http://en.wikipedia.org/wiki/Free_software#Definition http://en.wikipedia.org/wiki/Free_software#Definition

hdevalence 13y ago
Freedoms 2 and 3 seem to be necessary for when you find errors in the software (in particular, bugs that cause security vulnerabilities).
rbanffy 13y ago
Freedoms 2 and 3 are necessary to ensure long-term maintenance of the software. If they are absent, once the company who creates it dies, the software dies with it.

rbanffy 13y ago

> Is the only alternative to using software that the NSA may have infiltrated Actually, no. The NSA has not infiltrates each and every proprietary software publisher. It is, however, the only way to run software you can trust. Even if your software provider was not infiltrated by the NSA, it can be infiltrated by other entity.