Does the Chinese government compiles and builds their own version or they trust Microsoft will use the exact same source they have shown?
In Brazil we had some interesting questioning regarding the security of electronic voting systems - in 2002, I was on the team that developed the WinCE version of the electronic ballot - we had the source for the application and some of the device drivers, but we didn't have the sources for the compilers, libraries and operating system. Any of those layers could harbor a known (or unknown) backdoor that could allow tampering with the voting data.
I'm pretty sure my compiler was clean (I installed my development machine from my MSDN subscription CDs before the corporate IT folks could get their hands on it, so I imagine nobody could have sneaked into my house to place the CDs in my backpack)
In Brazil we had some interesting questioning regarding the security of electronic voting systems - in 2002, I was on the team that developed the WinCE version of the electronic ballot - we had the source for the application and some of the device drivers, but we didn't have the sources for the compilers, libraries and operating system. Any of those layers could harbor a known (or unknown) backdoor that could allow tampering with the voting data.
I'm pretty sure my compiler was clean (I installed my development machine from my MSDN subscription CDs before the corporate IT folks could get their hands on it, so I imagine nobody could have sneaked into my house to place the CDs in my backpack)