Advertisement

linux thread.... (inspired by gimp thread)

Started by March 15, 2009 04:29 AM
70 comments, last by phresnel 15 years, 7 months ago
Well, "paranoia" does not really lead to "security".

As for OSS not needing subverting - that's your opinion. I'm sure there are at least a few programmers whom believe they lost their job to OSS and think otherwise. Every big project steps onto someone's toes.

As for ubuntu being far from the best distribution security-wise, I would agree. backdoors planted into kernel by one of kernel developers? Don't make me laugh. Debian is bloody patching every single thing, from kernel to openssl, which is really something that is better not tampered with [click on link, biggest OSS fuckup to date], and ubuntu has another layer on top of this. [actually I find openssl code to be rather bad, as in, low comments ratio, sometimes rather clever code]

For the backdoors...
I don't believe source code review can ever find professionally made backdoor in a huge piece of C code. Maybe using programming language more suited for verification, it could be possible, but for C and C++, certainly not. Task of finding good backdoor is fundamentally equivalent to Halting problem, and, in my opinion, is harder than writing the code in first place.

I wrote an experimental implementation of Diffie Hellman key exchange. It is quite an eye opener just how many subtle security-breaking bugs you can have in that kind of code, the those which i did find. Code that is accurately written, passes unit tests and generally seem to work just fine, and with no intention to make any backdoors. To plant an extremely hard to detect backdoor, all it takes is author not fixing some bug which he see. It would be impossible to prove criminal intent from the code alone when it is a genuine bug - all you can do is watch developers for contacts with terrorists™
Quote: Original post by Mithrandir
Quote: Original post by JSoftware
Quote: Original post by Kambiz
... For everyone that does not care about games Ubuntu is a great choice.


Well, I believe you hit spot on.
Protip: GameDev.net This might be a reason not many people here like Linux


Also: People actually like making money for their work and the "let's destroy the software industry!!!" attitude of the gnutards kind of pisses people off if they make their living by writing software.


Also: Actually it is ignorant to assume that all people want to make money of all their work. Often, they rather code for having fun in their spare time. The "those gnutards want to destroy software industry" attitude of zealots like you kind of pisses people off that just do some floss hobby coding.


Quote: Microsoft made that decision because idiots like Creative Labs refused to fix their driver bugs which would cause windows to bluescreen, therefore giving Windows a negative reputation for crashing, despite the fact that it was entirely a third party problem.


Dude, you like to talk in terms of insults, do you? Bad RL, eh?

This topic is closed to new replies.

Advertisement