Hi, Reference: > From: atair <[email protected]> > Date: Thu, 25 Jul 2013 21:17:43 +0000
atair wrote: ... Therefore, changes that look like back doors are VERY unlikely to find their way in a release, because hundreds of people are looking how the software evolves and will reject such a patch. ... Yes, malign code would have to hide in plain view in source (& most likely evil patches wouldn't get past the view of the people commiting the `improvement' to the source repository ;-). However you missed the point that many MS users are not programmers, & will not be compiling their own binaries, so any malign entity could regularly hack their nasty extras in, compile & issue binaries that dont match published source (sure that would breach licence, but irrelevant to an evil doer), & those without access to exactly the same set of compiler tools would not easily knowof embedded evil extra mods. The solution of course is as you urged [email protected] , to get a free operating system such as Linux or BSD, complete with free build tools & compile your own (even non programmers can do that, eg on an OS downloaded from http://www.freebsd.org just type cd /usr/ports/security/gnupg ; make install ) However for some thats too much effort, for them greater risk, their choice. Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultant, Munich http://berklix.com Reply below not above, like a play script. Indent old text with "> ". Send plain text. No quoted-printable, HTML, base64, multipart/alternative. _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
