Hacker News new | ask | show | jobs
by rhelmer 4507 days ago
The "change the open source client code without anyone noticing" attack vector is important too: https://brendaneich.com/2014/01/trust-but-verify/