|
Posted by Nomen Nescio on December 1, 2008, 9:40 am
If you were Registered and logged in, you could reply and use other advanced thread options
nemo_outis wrote:
>
> ...
> >> In short, there is NO substantive public evidence that Truecrypt's
> >> source code has been the subject of thorough review, nor is there any
> >> reason to rely on the credentials of the developers (since they
> >> remain anonymous). In that absence, using Truecrypt is an act of
> >> blind faith every bit as much (or more!) than using a closed-source
> >> encryption program.
>
> > "You can't trust code that you did not totally create yourself"
> > Ken Thompson "Reflections on Trusting Trust"
>
> Yes, the above paper - which everyone here should read! - makes a very
> powerful point.
If you're a moron. There's nothing wrong with trusting code someone
else wrote. individuals, businesses, and even governments do it
every day with no ill effects. The key is learning enough to know
WHICH code to trust and definitely not listening to idiots like you.
>
> But it gets worse, much worse.
>
> Open source code is no panacea.
Nobody ever said it was. It makes you feel like a grownup to lie
and try to make it sound like someone did, but it never happened.
Once again, open source is an additional barrier for bad or evil
code to overcome. The ideal would be poth public and private review.
> First of all, I don't believe most open
> source code gets anything more than very cursory review
Yeah, that's why the last two flaws in GnuPG were discovered by an
independent reviewer. And why the last SSL bug was discovered the
same way.
Never mind the fact that reality PROVES it works or anything, just
go ahead on and blither.
> Good thorough code review and testing is hard, tedious, painstaking work.
Wy do you suppose it is you have to pretend it's an either/or world
just to try and make a point?
Do you suppose you've had your ass handed to you over this before
and now your ego just won't let you sleep unless you spread this
sort of nonsense?
Of course that's it.
<rest snipped unread>
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map