this post was submitted on 30 Mar 2024
1577 points (97.7% liked)
linuxmemes
20880 readers
8 users here now
I use Arch btw
Sister communities:
- LemmyMemes: Memes
- LemmyShitpost: Anything and everything goes.
- RISA: Star Trek memes and shitposts
Community rules
- Follow the site-wide rules and code of conduct
- Be civil
- Post Linux-related content
- No recent reposts
Please report posts and comments that break these rules!
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
What are you saying? That there are people doing the top version ("I want a backdoor / I ask the corpo to grant me access") for FOSS but they're less likely to get caught if they don't do all the gymnastics?
OP is referring to a backdoor that was found. It apparently modified behaviour in a way that was noticeable to humans, suggesting that it was built by an unskilled adversary.
It's a safe bet that there are others (in FOSS) that remain undiscovered. We know that skilled adversaries can produce pretty amazing attacks (e.g. stuxnet), so it seems likely that similar vulnerabilities remain in other FOSS packages.
Stuxnet was done by a literal army assembled by state actors with massive funding hoarding zero days. If an attack like that came at you there is very little you can do.
I agree, but I don't think that image (about survivors' bias) applies to the op meme then, as that would imply that it only seems like open source backdoors are convoluted because we've not found the simple/obvious ones
In this case, the selection process is discovering human-evident back doors. It fits by my reading.