Even if I had the skills to confirm the code is secure, how could I know that th... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		delichon 15 days ago \| parent \| context \| favorite \| on: FBI couldn't get into WaPo reporter's iPhone becau... Even if I had the skills to confirm the code is secure, how could I know that this is the code running on my phone, without also having the skills to build and deploy it from source?

warkdarrior 15 days ago [–]

Also, you need to make sure that the installation process does not insert a backdoor into the code you built from source.

fragmede 15 days ago | [–]

Or the compilation process!

https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact