[a-dub]

Yes but at least with open source software, you have a fighting chance of knowing what you're running.

What's the open source equivalent of DUAL_EC_DRBG or Kaspersky Anti-Virus?