News for hackers. Stuff that matters.

A comment on ‘Who Benefits?’ Inside the EU’s Fight over Scanning for Child Sex Content. Parent comment

Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by RIMR on Monday September 25, 2023 @12:41PM (#37646698)
No, lol. They don't. Maybe Windows, because Microsoft doesn't seem to care much about privacy, but Apple doesn't mess around. And if there were backdoors in Linux, we'd definitely know about it, because people are actively looking for stuff like that.
[ Parent | on HN ]
Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by Sporktacular on Monday September 25, 2023 @01:03PM (#37647105)
This is just wrong. Apple's public position could differ from its actual one. And Hiding a backdoor (or hiding with the deniability of an innocent bug) in open source is possible. "we'd definitely know about it" is not how security works.
[ Parent | on HN ]
Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by RIMR on Monday September 25, 2023 @02:56PM (#37648797)
There have been exhaustive third party reviews of the Linux kernel, nothing is impossible, but a government backdoor would be extremely hard to hide from the level of scrutiny that codebase is put under.

I would certainly consider it unlikely enough that any suggestion to the contrary, without evidence, is just a conspiracy theory.

[ Parent | on HN ]
Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by Try1275 on Tuesday September 26, 2023 @07:51AM (#37657924)
Could there be a backdoor on the hardware level?
[ Parent | on HN ]
Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by RIMR on Tuesday September 26, 2023 @01:49PM (#37663103)
I mean, yes, as we have already agreed, anything is possible, but I'm not in the business of believing things without evidence.
[ Parent | on HN ]
Re:‘Who Benefits?’ Inside the EU’s Fight over Scanning for C... by Sporktacular on Thursday September 28, 2023 @07:26AM (#37688066)
"we'd definitely know about it".

Yes, but extremely hard is not the same as impossible. How many security 'bugs' can we be sure were unintentional?

This is not just semantics. Complacency can come from over-confidence.

[ Parent | on HN ]