content: One of the many advantages of open source software is, that if a three letter agency wants to compromise whatever piece of software they set their sights on, all changes to the code must be done in full public view, I used to be skeptical that open source code was "spook-proof", but the fact that they keep trying to pass laws to ban open source crypto tells me they can't keep backdoors in 100% transparent software. So take Tor browser for example, everyone can see the code, and if anyone tried to backdoor it, they would be caught as soon as the malicious code was added. What I am trying to determine here, is if this is a bug added by mistake which is possible considering how little the project receives, or a slyly placed backdoor. Some believe Heartbleed was an example of a nearly 2 decades old backdoor but my professional opinion is that it was a simple bug, but OpenSSL is incredibly underfunded and used by major corporations who give the developers nothing in return.