That's why we use open source stuff like Signal, and why you should verify signatures of compiled binaries I'd you don't want to compile from source yourself.
While it's not impossible to introduce a weakness in open source, it's a lot more difficult because there are so many eyes on it. It would be like committing a crime in time square on NYE.
There are examples of holes being put into open source projects. I bet some are uncaught. Look at the XZ Utils Backdoor as an example of one that was caught, barely.
369
u/[deleted] Feb 17 '25
[deleted]