Hacker News Reader

Comment by bcl | Hacker News Reader

I have a couple problems with this:

    * Don't trust an OS you can't examine the source for.
    * Don't trust binaries you can't build from source, no matter what OS you run them on.

I wouldn't trust iOS, OSX, Windows or any other closed system with any kind of encryption these days.

I think you also forgot:

  * Don't trust a compiler that has been compiled with an untrustworthy compiler... [1]

You can add most Android devices to that list. Sadly, this is a compromise we'll have to make if we want encryption to be even vaguely widespread.

sure, but i trust Moxie Marlinspike

Right, he has a good reputation. But that shouldn't help -- he can't do anything about what underlies his code on these closed systems.