is it security flaw or backdoor?