[CPT-FGC] Re: New Mailing List
- From: Ilitirit Sama <ilitirit@xxxxxxxxx>
- To: cpt-fgc@xxxxxxxxxxxxx
- Date: Wed, 11 Sep 2013 16:37:10 +0200
Dunno if you guys are following this whole NSA spying debacle but it's
actually really bad. You can't even trust open source any more because of
this attack:
http://scienceblogs.com/goodmath/2007/04/15/strange-loops-dennis-ritchie-a/
Basically, the source code is 100% clean and secure, but the *compiler* is
compromised. So what they do is monitor for any type of code that uses
passwords/encryption and then they silently insert a backdoor into your
program. An analogy would be like an architect designing the most secure
facility in the world, and giving the plans to the builders who then build
in hidden entrances that only they know about.
The only way to avoid it is to compile your own compiler, but how can you
trust the compiler's compiler? And even if you could trust the compiler,
how can you trust the hardware? (so far 2 hardware manufacturers have been
caught inserting backdoors into routers - DLink and Huawei)
Troubling times we live in.
Other related posts:
