What are the best ways to test for backdoors though? Phoning home I get. But what about just breaking in because there's a backdoor left in for when "they" single you out for persecu- I mean investigation.
It could be very well obfuscated.
Second: when you read source code, do you start at the lexicographic first .c file and just read downwards? No? Neither do reversers.