<p>It's just not a plausible threat model. First, all changes are publicly audited by hundreds of people. Second, releases are signed by the developers.</p>

<p>Third, it wouldn't even do any real damage. Bitcoin once had an overflow bug that did about as much damage as any intentional defect possibly could. The network easily recovered as people identified the bug, distributed fixed clients, and rejected the invalid transactions.</p>

<p>If you're really worried about this, just don't upgrade to any new version until it's been out for at least a week. By that time, any subterfuge would have been discovered by dozens of people and widely reported around the world.</p>

CC BY-SA 3.0
2011-11-07T22:05:47.693Z
2011-11-07T22:05:47.693Z
David Schwartz
<p>If you follow the advice <a href="https://bitcoin.stackexchange.com/questions/565/how-can-one-download-the-bitcoin-client-securely">on this question</a>, you can download the client and verify it's been signed by Jeff Garzik, free from any possible tampering by middle men.</p>

<p>Future client versions are planned to be distributed via other, more p2p-friendly means (the name of the distribution project has slipped my mind right now)</p>

CC BY-SA 3.0
2011-11-08T14:05:08.400Z
2011-11-08T14:05:08.400Z
2017-04-13T12:47:33.743Z
ripper234
<p>It does not matter where code is situated. Github may be used just for first time.</p>

<p>Your question is about developers. Anybody who can commit to master branch, can inject malicious code. It will be a little mistake in math, parser, network stack.</p>

<p>It also may be a group of coders, they will try to hide this injection with mass commit to code, with preposition to improve bad places, e.g. improve db size( v0.7 -> v0.8 ).</p>

<p>Behind them may stay a great government's structure, like NSA or FBI, CIA. </p>

<p>Such injection was in OpenBSD project early. One of the developers collaborated with FBI. </p>

<p>Only God know what kind of mistakes(backdoors) contain mass commit by Microsoft to Linux kernel(v3.0).</p>

<p>My 10 cents of paranoia.</p>

CC BY-SA 3.0
2013-07-29T16:13:29.317Z
I say that Microsoft commit "Microsoft's code" to Linux kernel. And only God know how many backdoors will be founded in "Microsoft's code" in the future.
stackkeeper
CC BY-SA 3.0
2013-07-29T18:00:17.307Z
You say: " *My 10 cents of paranoia.* " I'd say this is more than just paranoia. This is bordering on insanity.
Nik Bougalis
CC BY-SA 3.0
2013-07-29T15:39:00.270Z
2013-07-29T15:39:00.270Z
stackkeeper
<p>You should learn more about the way the git scm system works. First, it is distributed so that everyone has a complete copy of the entire codebase; second, every commit is checksummed, so that if github wanted to (or was forced to) underhandedly change code, it would be detected by everyone.</p>

CC BY-SA 3.0
2011-11-07T20:41:01.267Z
2011-11-07T20:41:01.267Z
nanotube
<p>The single most-trusted canonical source of Bitcoin client is <a href="https://github.com/bitcoin/bitcoin">https://github.com/bitcoin/bitcoin</a></p>

<p>This URL is controlled by a single US company GitHub Inc., headquartered in San Francisco, United States. The US government (nor any other government) is probably not a friend of Bitcoin, and they could theoretically threat the CEOs of GitHub Inc. with an arrest, unless they implement some kind of backdoor into the Bitcoin code, which could be downloaded by a large number of people before it would get noticed.</p>

<p>If and how is the Bitcoin network protected from being poisoned and destroyed this way?</p>

<bitcoin-core-development><decentralization><safety><politics>
How safe it is that a single San Francisco company controls the canonical location of Bitcoin code?
ria
# How safe it is that a single San Francisco company controls the canonical location of Bitcoin code?

(Asked by: username_0 on 2011-11-07)

The single most-trusted canonical source of Bitcoin client is <https://github.com/bitcoin/bitcoin>

This URL is controlled by a single US company GitHub Inc., headquartered in San Francisco, United States. The US government (nor any other government) is probably not a friend of Bitcoin, and they could theoretically threat the CEOs of GitHub Inc. with an arrest, unless they implement some kind of backdoor into the Bitcoin code, which could be downloaded by a large number of people before it would get noticed.

If and how is the Bitcoin network protected from being poisoned and destroyed this way?

**Tags:** bitcoin-core-development, decentralization, safety, politics


---

## 4 answers

### Answer by username_5 on 2011-11-07. Score: 18 | Accepted answer

You should learn more about the way the git scm system works. First, it is distributed so that everyone has a complete copy of the entire codebase; second, every commit is checksummed, so that if github wanted to (or was forced to) underhandedly change code, it would be detected by everyone.


---

### Answer by username_1 on 2011-11-07. Score: 8

It's just not a plausible threat model. First, all changes are publicly audited by hundreds of people. Second, releases are signed by the developers.

Third, it wouldn't even do any real damage. Bitcoin once had an overflow bug that did about as much damage as any intentional defect possibly could. The network easily recovered as people identified the bug, distributed fixed clients, and rejected the invalid transactions.

If you're really worried about this, just don't upgrade to any new version until it's been out for at least a week. By that time, any subterfuge would have been discovered by dozens of people and widely reported around the world.


---

### Answer by username_2 on 2011-11-08. Score: 5

If you follow the advice [on this question](https://bitcoin.stackexchange.com/questions/565/how-can-one-download-the-bitcoin-client-securely), you can download the client and verify it's been signed by Jeff Garzik, free from any possible tampering by middle men.

Future client versions are planned to be distributed via other, more p2p-friendly means (the name of the distribution project has slipped my mind right now)


---

### Answer by username_3 on 2013-07-29. Score: -3

It does not matter where code is situated. Github may be used just for first time.

Your question is about developers. Anybody who can commit to master branch, can inject malicious code. It will be a little mistake in math, parser, network stack.

It also may be a group of coders, they will try to hide this injection with mass commit to code, with preposition to improve bad places, e.g. improve db size( v0.7 -> v0.8 ).

Behind them may stay a great government's structure, like NSA or FBI, CIA.

Such injection was in OpenBSD project early. One of the developers collaborated with FBI.

Only God know what kind of mistakes(backdoors) contain mass commit by Microsoft to Linux kernel(v3.0).

My 10 cents of paranoia.

> **Comments:**
> **username_3**: I say that Microsoft commit "Microsoft's code" to Linux kernel. And only God know how many backdoors will be founded in "Microsoft's code" in the future.  
> **username_4**: You say: " *My 10 cents of paranoia.* " I'd say this is more than just paranoia. This is bordering on insanity.  

---

