Jonathan blow talking about backdoors in open source [video]

That video was published already 2 years ago. It is a fundamental problem.

> Guys… Okay so here’s the thing that people have to realize: this whole thing with the way Open Source software is done right now, where there’s a package manager and everybody contributes, and it’s code sourced from anywhere in the world, and you just auto-download it… That is not gonna last that long. And the reason it’s not gonna last that long is that I could almost guarantee you that there are at minimum thousands of people around the world whose job is to inject bugs into open source software for espionage purposes.

> […]

> Imagine there is a programmer of approximately the same skill level as one of the Linux kernel “police”. Those guys are busy. All you have to do is make something subtle. You don’t… See, here… I’m not saying you add some lines of code that say “switch to root and open a shell” right? That’s not what we’re talking about. We’re talking about introduce very subtle situations where a variable can have the wrong value that normally that’s fine, but when you combine it with thing B and thing C it happens to produce an exploit.