You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: _posts/2025-03-09-no-esp32-style-backdoor.markdown
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ The news is somewhat overhyped (the attacks *probably* require physical access)
13
13
14
14
The vulnerability is in binary-only Bluetooth drivers.
15
15
The obvious response is 'use only open-source code'.
16
-
That's a nice place to be (and one that as an open-source platform, we strongly encourage!) but it's not always possible and doesn't always fix the problem.
16
+
That's a nice place to be (and one that, as an open-source platform, we strongly encourage!) but it's not always possible and doesn't always fix the problem.
17
17
18
18
First, being able to read the code and build it yourself makes it *possible* to find a bug, but only if you're doing a careful code review.
19
19
Auditing code that someone else has written is notoriously hard and, as the [underhanded C contest](https://www.underhanded-c.org) showed, hiding intentional vulnerabilities in source code is much easier than finding them.
0 commit comments