[electic]

> Without the source code, there is no way to fully verify the security of a solution.

So you are telling me if you had the source code you would not be able to verify the code and also use the code to fully verify the expected behavior of the binary?

[tptacek]

It is not as easy to verify source code as it sounds.

[electic]

and it is not easy to do black box testing either.