https://boards.4chan.org/pol/thread/324785043

-------------------------------------------------------------
Anonymous (ID: /8ykyyp2)  01/15/24(Mon)13:36:53 No.455229302▶>>455229371 >>455229419 >>455229440 >>455229944
>>455228408
Hacking boils down to finding a mistake made by the developers and skillfully using it to take over the execution of the code, or to otherwise achieve an unwanted outcome. How do you design a back door into open source software then? You intentionally leave a subtle, exploitable bug. It could be a memory management bug leading to info leaks or code execution, it could be a novel publicly unknown weakness in a cryptographic implementation - recall that NSA hires the most mathematicians in the world. Your request is equivalent to “do a full audit of signal’s server and client software.” Actually even more, you want a proof of correctness of the compiled binary (since the signal distributed in App Store has to differ slightly from the oss code).
-------------------------------------------------------------


-------------------------------------------------------------
Anonymous 02/03/24(Sat)18:10:38 No.98806767▶
>>98801134
You need to look for them and add extra code to discover and remove vulnerabilities. You can't search for what you don't know so there are pretty much vulnerabilities in all existing software that no one has discovered yet.

just write what looks like correct code and deliberately keep a vulnerability you know about. boom, backdoored open source software until someone else discovers it

-------------------------------------------------------------

