I’m thinking that software like Signal, Bitwarden, Firefox and RHEL is more likely to be pushed (by unconventional methods) to introduce backdoors under Trump 2.0. Less complex software that is developed by an international community is of course less suseptible.
What do you think? Will the risk be higher during Trump 2.0 or is the FOSS community diverse and international enough? Am I just paranoid and irrational?
Closed source software and cloud is of course a no brainer since always. But clompex FOSS with centralized development and hosting pretty much suffers from the same problem.
It’s certainly not. There are so many actors with opposing agendas that are motivated to keep it secure that its incredibly difficult to slip something through.
If you’re going to attack Linux, you won’t attack the kernel, but instead you’d go for some obscure component that most distros use but is only maintained by one or two people (e.g. xz).
If you abandon Linux, you’re likely going to have more vulnerabilities. Security through obscurity is no security at all.