is open source software secure because anyone can scrutinise it?
>>51818975
No. If I release the source code of a shitty software, it won't be "secure".
But a good designed and implemented software is considered (in general) more secure for the simple reason that you expect that more people are going to lurk your code to help you fix holes than actually exploiting them.
>>51818975
Wouldn't knowing how the software actually works make it less secure?
>>51818975
open source software is insecure because no one ever bothers to scrutinize it, except hackers
>>51819300
This. At least with closed source people are getting paid to make sure the software is safe.
No, just look at the Morris worm. The worm's architect was able to find the exploit only because he could look at the source code for finger and rsh
>>51818975
Gee, I wonder if the most insecure OS today is open source...
>>51818975
>is open source software secure because anyone can scrutinise it?
No.
But if the OSS you use is popular and it has active development then the users of the software will have some advantages over closed source software. Namely, once a bug or exploit is discovered, there won't be any secrecy. Everyone will know about it. And everyone will know the status of the bug/exploit fix.
As a rule there isn't anything more secure about FLOSS when compared to proprietary/closed source software. Most people are putting there 'trust' into the writers of the code. And since humans write the code there will be mistakes.
The exception to the rule would be people who have the ability to read through and understand the code of the open source software they run. They can check out everything they use, assuming they have the time. But that isn't the case for most people.
>>51819341
Or, more likely, paid to make sure the software is unsafe.
>>51818975
It's not an inherent thing, but popular open source projects are typically more secure.
Also, some shit has to be open source to prove that is fucking works. If you try to distribute proprietary encryption software, you would be laughed out of the room.
>>51819539
>Linking every post in the thread
What kind of advanced shitposting is this?
>>51818975
open source doesn't mean secure, but it can help in the sense that anyone can look over it
the question is IF and WHO has actually looked at a piece of code
