This is a most excellent place for technology news and articles.
It was the right move, but this needs to be expanded. Assume there are state actors from all of the major countries installing backdoors.
The digital war front will be getting hit from all sides. We need extreme paranoia to protect all of the innocent bystanders. Don’t assume even your own country is trustworthy in this.
Don’t assume even your own country is trustworthy in this.
My country is one of the world leaders in mass spying software development and even gave themselves the right to basically do deep packet inspections on everything going through it a long time ago, so...
I’m pretty certain my country banned Kaspersky because they kept outing western backdoors and malware. And I would bet my life that Windows has supported free use government backdoors since at least Windows 10.
I think you made a typo, did you mean Windows 1.0 😝
One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”
It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.
In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.
While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.
