
How do you guard against someone smuggling a gun onto an aircraft? You run them through a device that shows everything down to their skin.
How do you guard against a company smuggling a security breach into your company through installing it when it is manufactured? That's the problem we're faced with. We've already been affected by digital picture frames that come with viruses pre-installed so what makes us think that we can escape other and better hidden programs being installed on hardware that is supplied to our governments and big business (and small business for that matter)?
There are stories of devices offered as gifts to businessmen at trade fairs being infected with backdoor and Trojan horse software - software that reports on what is in the computer these devices are plugged into by their unsuspecting recipients.
This is just another reason why I'm an Open Source software (and hardware) person as much as I can be. When I load something onto my computer I at least have a fighting chance at it being exactly what it purports to be because, although I personally may not have looked at that particular software, others like me have - and have not found anything wrong with it; anything hidden in it.
This is not to say that it is impossible to have something hidden so well that it just is never found - it's been done before, and by someone who was in a position of trust, Ken Thompson, one of the creators of the original Unix system.
What it really means is that you can't trust anything that you, yourself, didn't have a direct hand in creating from scratch, using only tools you crafted, from scratch. That's completely impossible today as it would put us back in the stone age as far as computers are concerned, however using and supporting the open source movement is at least one step up in the right direction since it harnesses the brains of an incredible number of brilliant and dedicated people who love taking things apart and figuring out how they work - or don't work in this case.
Try to get Microsoft to prove to you that there are no backdoors or other security holes in their products - you can't because Microsoft won't open up their code for you or anyone else to look at. Same thing with the Chinese and their hardware. The chips themselves can have security compromises in them that you can't find except by monitoring their actual performance.
We live in a world where we don't know who to trust or even whether we can trust our electronic toothbrush to not be a privacy invasive device.
hello paranoia - and reality
richard