News for hackers. Stuff that matters.

A comment on WDMyCloud Multiple Vulnerabilities. Parent comment

Re:WDMyCloud Multiple Vulnerabilities by gruez on Friday January 05, 2018 @09:52PM (#16083573)
open source is only going to protect you from non-intentional backdoors. if the government really wanted a backdoor, there's nothing preventing them from loading a modified version that has a backdoor. short of dumping the firmware from nvram + reproducible builds, you won't be safe.
[ Parent | on HN ]
Re:WDMyCloud Multiple Vulnerabilities by madez on Friday January 05, 2018 @09:54PM (#16083584)
So we must also demand that we be able to change the software.

For hardware, we could demand that universities get paid to look at samples of hardware to find backdoors, maybe.

[ Parent | on HN ]
Re:WDMyCloud Multiple Vulnerabilities by thomastjeffery on Friday January 05, 2018 @09:55PM (#16083585)
That's only part-true.

We could use reproducible builds too.

Either way, we shouldn't reject the only solution because it has edge cases.

[ Parent | on HN ]