[CPT-FGC] Re: New Mailing List
- From: Stephen Scheidel <gieroadsteve@xxxxxxxxx>
- To: cpt-fgc@xxxxxxxxxxxxx
- Date: Wed, 11 Sep 2013 16:46:23 +0200
I feel sorry for anyone who goes anywhere near my backdoor :/
On 11 September 2013 16:37, Ilitirit Sama <ilitirit@xxxxxxxxx> wrote:
> Dunno if you guys are following this whole NSA spying debacle but it's
> actually really bad. You can't even trust open source any more because of
> this attack:
> http://scienceblogs.com/goodmath/2007/04/15/strange-loops-dennis-ritchie-a/
>
> Basically, the source code is 100% clean and secure, but the *compiler*is
> compromised. So what they do is monitor for any type of code that uses
> passwords/encryption and then they silently insert a backdoor into your
> program. An analogy would be like an architect designing the most secure
> facility in the world, and giving the plans to the builders who then build
> in hidden entrances that only they know about.
>
> The only way to avoid it is to compile your own compiler, but how can you
> trust the compiler's compiler? And even if you could trust the compiler,
> how can you trust the hardware? (so far 2 hardware manufacturers have been
> caught inserting backdoors into routers - DLink and Huawei)
>
> Troubling times we live in.
>
Other related posts:
