▲ 13 ▼ Do you trust Open Source software entirely?! (lemmy.ml) submitted 15 hours ago by behuman@lemmy.ml to c/opensource@lemmy.ml 20 comments fedilink hide all child comments I've some questions about Ghidra released by NSA on Github. And research about it then saw a ycombinator thread for it. That answer was clever and funny. As title marked, you really okay for just "open source" to trust it?
[–] urushitan@kakera.kintsugi.moe 1 point 8 hours ago (1 child) Just add certain. Hack certain humans. Protect certain capital permalink fedilink source parent hideshow 1 child comment replies: [–] CameronDev@programming.dev 1 point 3 hours ago That doesnt change anything about my original point. They are conflicting missions, whether you add certain or not. And no matter what you call it, backdooring ghidra defeats the point of both, it means no one will use it, which allows malware to run rampant. (Ghidra was released during the height of the cryptolocker craze, it allowed reversing those crypto lockers to be done by anyone, effectively neutering many of them). And when it gets caught its immediately attributable to the malware division, which they dont want either. There is zero point backdooring ghidra. Now XZ? *sshole? Thats the level of sophisticated backdoor I would expect from the NSA. permalink fedilink source parent
[–] CameronDev@programming.dev 1 point 3 hours ago That doesnt change anything about my original point. They are conflicting missions, whether you add certain or not. And no matter what you call it, backdooring ghidra defeats the point of both, it means no one will use it, which allows malware to run rampant. (Ghidra was released during the height of the cryptolocker craze, it allowed reversing those crypto lockers to be done by anyone, effectively neutering many of them). And when it gets caught its immediately attributable to the malware division, which they dont want either. There is zero point backdooring ghidra. Now XZ? *sshole? Thats the level of sophisticated backdoor I would expect from the NSA. permalink fedilink source parent