Untitled attachment

Notices where this attachment appears

1. Christine Lemmer-Webber (cwebber@octodon.social)'s status on Monday, 13-May-2019 11:31:21 UTC Christine Lemmer-Webber

   in reply to

   @mikegerwitz @lxoliva However, we shouldn't believe that just because something is free software that it is trustworthy, or that we have the capacity to fully audit our software systems for security. The sad reality is that people run way too much code to be able to trust or audit systems, and Ka-Ping Yee's thesis showed that if an attacker wants to add vulnerabilities to (even free) software, even the best programmers won't detect it http://zesty.ca/pubs/yee-phd.pdf