Post #2691594
2025-12-02 19:10 UTC
@plumeros@swiss.social @globcoco@mamot.fr @Uddelhexe@mastodon.online No, that's not how closed source and open source work at all. Closed source software is not a black box. Open source absolutely doesn't mean that all or most vulnerabilities get discovered. Linux kernel has many severe vulnerabilities being found on a regular basis which have existed for years and even decades. Most projects are not getting anything close to that much review. It certainly doesn't mean that an intentionally hidden subtle vulnerability will be found.
Replies (1)
-
@hyc@mastodon.social 2025-12-06 09:04
@GrapheneOS@grapheneos.social @plumeros@swiss.social @globcoco@mamot.fr @Uddelhexe@mastodon.online You keep repeating "closed source software is not a black box" but in most cases that simply isn't true. Proprietary software companies go to great lengths to impede attempts to reverse engineer their binaries. One of the reasons proprietary apps are so bloated is because their code has been processed by an obfuscator, which replaces simple instructions with long sequences of mathematically equivalent code that takes thousands more instructions.