Josh and Kurt talk about backdoors in open source software