Remix.run Logo
phire an hour ago

"It's documented in the datasheet" is such a weak excuse for a backdoor.

Documenting a backdoor doesn't make it not a backdoor, just means it's not a hidden backdoor.

The fact that a number of machines shipped with the backdoor accidentally enabled, and nobody noticed for over a decade shows just how dangerous even a documented backdoor can be. The oversight wasn't even detected by someone reading the manual, it was detected by a security researcher who wrote a generic tool to fuzz out such backdoors.

brador an hour ago | parent [-]

Doesn’t backdoor imply hidden? If it’s clearly documented it’s just a (front)door?

blank429384jf an hour ago | parent [-]

backdoor means a secondary access point that defeats the security features of the primary. In the door analogy, the home owner spends a ton on a lock and camera for the front door but doesn't even have a deadbolt on the back.

close04 39 minutes ago | parent [-]

Every definition of a “backdoor” in computing implicitly or explicitly considers it hidden/covert.

In the house analogy you don’t see the backdoor when approaching the front. If it was just “an alternative everyone knows about and can be broken easier than the front door” then it probably would have been called “a window”.

Most login forms have a weaker option like a SMS 2FA or password reset fallback. Nobody calls it a backdoor. It’s just a crappy second front door, or window.

blank429384jf 20 minutes ago | parent [-]

I'm probably mistaken, but I've always referred to password resets as backdoors. Is there another term they could be classfied as?

close04 8 minutes ago | parent [-]

> Is there another term they could be classfied as?

As an advertised feature of the product.

Your personal definition doesn’t match the general understanding of the word and concept. By your definition every window on a house or car is a “backdoor”. Anything with an advertised fallback is a backdoor. And sometimes the “front door” is the back door: getting money from an ATM is less secure than with an ID at the bank teller.