LWN.net Logo

There's latent checking and spot checks

There's latent checking and spot checks

Posted Dec 8, 2012 21:22 UTC (Sat) by oever (subscriber, #987)
In reply to: There's latent checking and spot checks by ikm
Parent article: Stallman: Ubuntu Spyware: What to Do?

Yes, I meant that it is hard to match binary to source. Publishing a binary with spyware and claiming that it corresponds to source code which has no spyware can go undetected.

In the above example of WordPress, I assume OP checked the production PHP code. Since WordPress is shipped only as source (as far as I know), this would rule out the presence of spyware in the site.

If the site was running a compiled CGI plugin, finding that the source code has no spyware, does not mean that the binary has no spyware. The spyware might even be in the apache binary.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds