Date: Mon, 28 Jan 2019 16:16:02 +0000 From: Steve O'Hara-Smith <steve@sohara.org> To: JD <jd1008@gmail.com> Cc: Polytropon <freebsd@edvax.de>, Valeri Galtsev <galtsev@kicp.uchicago.edu>, freebsd-questions@freebsd.org Subject: Re: Wireless interface Message-ID: <20190128161602.49f9c5c06a4de027bf06e8b0@sohara.org> In-Reply-To: <5C4F2951.4080206@gmail.com> References: <CAPu-kW-0u=Eoj8NtASnD_WDnsosj_WcTEh=Zhby1DnBV3d2rdg@mail.gmail.com> <MWHPR04MB04954E8E691D98C40B68607780940@MWHPR04MB0495.namprd04.prod.outlook.com> <20190126213957.adfeb61c.freebsd@edvax.de> <5C4CE8B8.4030608@gmail.com> <20190127013705.3e8cd5f3.freebsd@edvax.de> <a150116a-146d-7afb-ec5f-5f0ed276b0b6@kicp.uchicago.edu> <20190127204742.f558599b.freebsd@edvax.de> <5C4F2951.4080206@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 28 Jan 2019 09:09:53 -0700 JD <jd1008@gmail.com> wrote: > > > On Sun, 27 Jan 2019 11:14:40 -0600, Valeri Galtsev wrote: > >I 100% agree with Polytropon, and would just add one simple point: > >FreeBSD is open source system. Everyone in the World can *(and some/many* > >*do)* go and audit the code for backdoors and/or vulnerabilities. > > Really??? > Audit tens or hundreds of millions of lines of code for OS, > Compilers, Libraries, applications (especially interpreted > language applications such as Java and JS) to search for > trojans and vulnerabilities? > I seriously doubt it. Certainly no single person or group has done so, but the main thing is that all of it is available to be audited and much of it is known to have been audited which makes it a very unsafe place to attempt to hide anything. In almost every case commit requests are available to public code review before they are committed. However much code is being written there are more reviewers than writers anywhere I have looked. -- Steve O'Hara-Smith <steve@sohara.org>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190128161602.49f9c5c06a4de027bf06e8b0>