>>13008Please spare me the demoralizing wining.
These are technology projects, if the people involved are constructively minded engineers and tech-enthusiast that want to have and build nice things. We'll get really secure digital systems that work reliably and well.
As soon as we get the kind of people that are looking for
keys to power, they will mess with stuff, inject breakage, insecurity and what not. This is the problem we have now. Computers are just tools for doing computations, but some people want it to be something else. In the end they cause defects in our systems.
One point is that we have to convince the police to get off the surveillance train, that is causing them to demand "backdoors" which really are just security-holes. It's not going to help them fight actual crime. Most organized crime isn't based on stealth, they are bribing and black-mailing compricials, (compromised officials). These structures can exert the capacity to manipulate surveillance records, the same way Al-Capone made witnesses change their testimony.
Forensics technology counters that type of organisation much better. There are people trying to build sophisticated portable scanners that lean towards the scientific and empirical. Those projects are starved for funding, because they only get crowdfunding from a few scifi-fans who want future-gadgets. If the police could pivot from snooping to measuring, and let go of the creepy stalking in favor of forensic investigating, they could reallocate their tech-toys-budgets towards those devices. It would improve things for everybody. They get better results and we'll have fewer holes in our computers.
>xz-libThat was actually a big success for open source. Somebody spend years slithering into a position where they could do a lot of damage and it was foiled by some random guy investigating a suspicious artifact over a week-end. Obviously you are right there probably is more shit like that going on, and new mitigation strategies have to be devised to reduce the attack surface.