On Sat, 2004-02-28 at 01:39, Vincent wrote:
On Fri, 27 Feb 2004 10:02:09 -0500 (EST)
"Mike A. Harris" <mharris(a)redhat.com> wrote:
> On Fri, 27 Feb 2004, Leonard den Ottolander wrote:
>
> >How well scrutinized is this NSA code actually? Everybody can see they
> >won't slip in an obvious backdoor, but how about nasty little overflows,
> >tucked away deep inside the code, for which they already have exploits
> >in their drawer?
>
The NSA would need to be stupid to do something like this: introduce
backdoors in code who has their mark all over it and who is likely to
be scrutinized because "it is code from NSA". What the NSA would do is
have one of their guys become a linux contributor without saying
he is from NSA. Even better, corrupt/blackmail one of Linux regular
contributors preferrently one who is quite high in the "chain of command".