Glenn Greenwald: The NSA tampers with US-made routers

Re:Glenn Greenwald: The NSA tampers with US-made routers by mindslight on Monday May 12, 2014 @04:43PM (#7735307)

Open source is not the whole story either. A decade ago I felt pretty smug with GNU/Linux; these days it has become such a large target that you can no longer ignore the countless non-open components in every system. And with things like heartbleed it's not clear that we're even defended against stochastic attackers, never mind intelligent ones. (apologies for beating the freshest dead horse)

The topic keeps coming up from time to time to time, since it's not a straightforward thing to fix, but only manifests itself with publicity. I've written a few comments before as to what I see are some of ultimate contours:

https://news.ycombinator.com/item?id=3658800

https://news.ycombinator.com/item?id=3658888

https://news.ycombinator.com/item?id=6149345

[ Parent | on HN ]

Re:Glenn Greenwald: The NSA tampers with US-made routers by RachelF on Monday May 12, 2014 @08:20PM (#7736077)

Open source depends on someone looking at the code. If Heartbleed proved anything, it is that most open source projects are pretty thinly funded and manned, and very few users ever bother to look at the source.

[ Parent | on HN ]

Re:Glenn Greenwald: The NSA tampers with US-made routers by dredmorbius on Tuesday May 13, 2014 @07:32PM (#7741260)

Also those which have broken architecture and bad attitudes toward end-users. OpenSSL fits this label, but so do KDE and GNOME, IMO. Systemd as well, among the reasons I regard it so critically.

[ Parent | on HN ]