• Christer Enfors@lemm.ee
    link
    fedilink
    English
    arrow-up
    27
    arrow-down
    12
    ·
    7 days ago

    So if we can’t completely 100% deal with a problem, we shouldn’t even try? I mean, you’re correct, but we can’t solve all problems at once. If we deal with at least one, then we’ve made progress. Then we can try to deal with the next one.

    • JoeKrogan@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      arrow-down
      11
      ·
      edit-2
      7 days ago

      No but this doesn’t do anything to “deal” with the problem as anyone can built up trust like Jian tan showed. The argument that this makes us more secure is like saying closed source is more secure cause the hackers dont have access to the source.

      We have evidence of the US messing with nist standards so by that same logic should we assume all us actors are bad ?

      The solution is to verify the code maybe have multiple people from different locations have to review stuff. Build more checks into the process.

      The whole point of it being open is that it can be reviewed. It shouldn’t matter where the contributor is from as all code should be subjected to a rigorous review process.

      • Saik0@lemmy.saik0.com
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        6 days ago

        We have evidence of the US messing with nist standards

        What… You realize that NIST is literally a government agency? It’s part of the United States Department of Commerce. It’s literally the US government. Are you saying that the government is messing with itself? What does that even mean?