News for hackers. Stuff that matters.
Re:There is no WhatsApp 'backdoor' by lisper on Saturday January 14, 2017 @03:50PM (#13400473)
Why do you keep raising this straw man? It is obviously possible to reverse engineer object code and find vulnerabilities. But it is (equally obviously) easier to examine source code to find vulnerabilities.
Re:There is no WhatsApp 'backdoor' by tptacek on Saturday January 14, 2017 @03:56PM (#13400510)
This slippery slope goes in both directions. Software is also easier to audit when it's built in higher-level languages, but we don't have ideological objections about verifiability to software written in C.
Re:There is no WhatsApp 'backdoor' by lisper on Saturday January 14, 2017 @04:18PM (#13400603)
I'm not sure I understand what you mean by that. Do you mean that people think that it doesn't matter what language code is written in as long as it is open source? I certainly don't believe that. It's pretty clear to me that C is a terrible language for writing secure code. (But coming up with something that is actually better than C is not so easy.)
Re:There is no WhatsApp 'backdoor' by FabHK on Saturday January 14, 2017 @07:51PM (#13401627)
All agree that higher level (e.g. C) is easier to reason about than lower level (assembly).

Now, you say that open source (e.g. C) is not only easier, but qualitatively different: open source good, closed source bad.

tptacek points out: higher level (e.g. Haskell) is easier to reason about than lower level (e.g. C) - maybe even qualitatively.

So, why are people only complaining about closed source, when they should (by analogous reasoning) be complaining about code written in C? Granted, it's possible to analyse, but it's obviously easier when it's written in Haskell!

Re:There is no WhatsApp 'backdoor' by lisper on Saturday January 14, 2017 @08:09PM (#13401709)
For what it's worth, I complain about code written in C too.