- [ ] loosely find what possible is the software can connect to - [ ] compile and run it, see if it is easy to contact the dev via it - [ ] see what os calls it performs, verify nothing is blatantly put on network - [ ] compare checksums of included binaries or - use argument with grarpamp: argument against software has as many or more sketchy parts as the points it is making against the software