Why doesn the FBI release source code?
The FBI makes the following justifications as to why they don’t release source code: • They say that hackers will find ways around it. • They claim that part of the code is from commercially licensed (i.e. they are contractually forbidden from releasing it). • Title 18 section 2512 of the United States Code prohibits possession/distribution of devices designed to surreptitiously eavesdrop on other people’s communications. Industry experts don’t believe these arguments: • Hackers already know how to find ways around Carnivore (e.g. PGP, anonymous remailers, anonymizing services, etc.). Experts think the real reason is that the code has not gone through a security audit and that hackers can easily attack Carnivore and bring it down. Experts believe that the only way to harden code against hacker attacks is to open it up to peer review. • The fact that key portions are licensed from commercial vendors rather than created by the FBI demonstrates that the FBI does not know how to create suc
