Skip to main content

View Diary: Linux Creator Admits NSA Demanded Backdoor (43 comments)

Comment Preferences

  •  So did he or didn't he? (3+ / 0-)
    Recommended by:
    joanneleon, Jim Riggs, Catte Nappe

    The article at the link doesn't say.

    If I ran this circus, things would be DIFFERENT!

    by CwV on Mon Sep 23, 2013 at 12:47:48 PM PDT

    •  Good question. (1+ / 0-)
      Recommended by:
      Mr Robert

      Please pretend that I don't give a shit.

      by Jim Riggs on Mon Sep 23, 2013 at 02:04:01 PM PDT

      [ Parent ]

    •  It's all open-source. (4+ / 0-)
      Recommended by:
      radarlady, stevemb, Hey338Too, pgm 01

      You can download binaries if you want, but a lot (most?) linux users like to download and compile all their own source, which means you can simply read through the code before setting it up.

      If there was a back door in the base code, somebody would have found it by now.  That doesn't preclude there being 'distros' (distributions) of just the binaries that are malwared up.

      •  Much trickier than that! (0+ / 0-)

        You can create back doors no one will see in code.  How?  You've got to write it in a way that no one detects.  It can be done, and with as much code there is to proof read, it's not so difficult to slip a nasty, virtually undetectable bug in there somewhere (provided you have the skills).

        Second.  Do you really trust your compiler?  You're distro's security ain't notin' if the compiler has been compromised.  Read the discussions on Slashdot, HackerNews, etc regarding compiler security, and be prepared to get paranoid.

        "So what if a guy threw a shoe at me!"

        by FoodChillinMFr on Mon Sep 23, 2013 at 09:35:48 PM PDT

        [ Parent ]

        •  If you want to be that paranoid, do you trust (1+ / 0-)
          Recommended by:

          your hardware?  One of the things we learned back in the dawn of time was 'microcode', wherein you programmed at the individual register level, far deeper than any of the languages 99% of programmers write in nowadays, with the modern languages layered on top.  Hack things at that level, and it won't matter what is written in the languages upstream.

Subscribe or Donate to support Daily Kos.

Click here for the mobile view of the site