[taylorfinley]

You don't think, with all the resources available to them, the intelligence community would spend just about whatever it took to sneak a vulnerability or two into the most-run piece of code on the planet? The core devs don't even have to be corrupted--there are 28 million lines of code in the kernel, you don't think a motivated adversary could sneak something past the gate keepers?

[anthk]

Any middleware Linux/BSD router could detect suspicious traffic.

[PhantomGremlin]

I don't think this is realistic any more. There's just too much noise, too many chatty processes, too much traffic.

A while ago I tried to track the start of a single application, a new install of Firefox. IIRC the first start generated traffic to about a dozen endpoints.

Also, macOS and Windows generate enormous amounts of traffic (others here have noted that).

The amount of background traffic is simply overwhelming. Perhaps security companies can make sense of it all, but it's far too much for most technical people.

I run my own OpenBSD firewall and I've long since given up trying to understand what my Macbooks are doing.

The beauty of OpenBSD itself is that it starts very few daemons, and all source code is available. So it's easy for me to understand what my firewall is doing.

   user@catalina ~ % ps aux |wc -l
        542

vs

   openbsd_user$ ps aux |wc -l                                                                    
         42

[anthk]

tcpdump on pflog0 and then use wireshark.

[h4x0r12345]

It's well known that they've already tried to insert back doors many times. On the other side is a huge amount of resources auditing and reviewing the kernel. Many reviewers, auditors, security analysts.

[Hackbraten]

Details about a few known attempts:

https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_t...

[Tijdreiziger]

TIL Linus Torvalds' father is a Member of European Parliament.