• 𝕸𝖔𝖘𝖘@infosec.pub
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    Really good points from here:

    The “many eyes” theory is dead since the NSA backdoor in OpenSSL clearly showed how delusional that belief is. SELinux has never been audited by any trustworthy truly US-independent entity, making it nearly as untrustworthy as closed source. On top of that, there is always The Underhanded C Contest, proving that looking at the source is not enough. You need to be an expert who can detect underhanded backdoors too. – Evi1M4chine Feb 3, 2018 at 13:05

    I don’t think the NSA’s official mission is a good reason to believe it wouldn’t add backdoors. The agency considers American citizens to be adversaries, not beneficiaries of its operations. – augurar Oct 21, 2014 at 4:23