Comment by bpt3
7 hours ago
How do you confirm that a train controller or any other piece of hardware does not contain a backdoor using industry standard software tools?
You can write whatever you want into a contract, but if you have no way to validate it, it's meaningless.
Also, the state-owned (and subsidized) Chinese company that doesn't have to play by the West's antitrust rules doesn't need to worry about your "contagion" concerns.
You rip it out and replace it with one that you can trust. And of course you hope you find all of them.
> You can write whatever you want into a contract, but if you have no way to validate it, it's meaningless.
3rd party audit like everything else?
Okay, if you want to pass responsibility off to someone else, how does the third party auditor do it?
I'm not talking about checking a compliance box, I'm talking about actually confirming no backdoor exists.
That's proving a negative. You are always going to end up with something like 'to the best of our ability'.