Post #2691575
2025-12-02 20:46 UTC
@globcoco@mamot.fr @GrapheneOS@grapheneos.social @Uddelhexe@mastodon.online
It's correct that open source doesn't guarantee that all vulnerabilities are found.
But OSS can be reviewed by anybody at anytime, the developers cannot control by whom.
Closed source is sometimes also reviewed. But who prevents closed source developers of removing backdoor code just before a review and add it immediately afterwards again? Who selects the reviewers? It's all in the hands of the closed source manufacturer.
So how can anyone trust closed source?
Replies (1)
-
@GrapheneOS@grapheneos.social 2025-12-02 20:49
@plumeros@swiss.social @globcoco@mamot.fr @Uddelhexe@mastodon.online > But OSS can be reviewed by anybody at anytime, the developers cannot control by whom. Your belief that closed source software is a black box which cannot be externally reviewed is incorrect. > But who prevents closed source developers of removing backdoor code just before a review and add it immediately afterwards again? Closed vs. open source doesn't work the way you believe it does. Closed source software means not having sources, not lacking the code.