>- The version there works and does not seem to have a trojan, so probably not a regular hacker.
Incorrect, all the guy did was compare diffs of the source. He did not compile the source to make sure the binaries matched.
Incorrect, all the guy did was compare diffs of the source. He did not compile the source to make sure the binaries matched.
And matching binaries is not a trivial task because of OS, compiler and SDK versions. The last time someone did this for Truecrypt it made the news: https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binarie...