Post #2691592
2025-12-05 19:46 UTC
@econads@mendeddrum.org @globcoco@mamot.fr @plumeros@swiss.social @Uddelhexe@mastodon.online Claiming that compiled code is infeasible or substantially harder to review to find vulnerabilities is effectively an endorsement of security through obscurity. You're implying attackers can find vulnerabilities in open source software much more easily. Most open source software does not receive external privacy or security review so it'd be an asymmetric advantage for attackers. Closed source software is NOT the black box you believe it is though.
Replies (1)
-
@econads@mendeddrum.org 2025-12-06 07:35
@GrapheneOS@grapheneos.social @globcoco@mamot.fr @plumeros@swiss.social @Uddelhexe@mastodon.online wow 4 replies to replay what you already said. And I already said that open source doesn't guarantee security, it actually has to be audited and the rest yes. I can tell you from 18 years in the industry that companies are not completely trustworthy either (audience gasp), and most closed source software doesn't have internal audits either. But why is closed source not a black box?