3 ms·
Generally speaking, holes in open-source projects are found by contributors much faster than by malicious attackers. If Flash really was a security concern, and
by TallGuyShort 17y ago
Generally speaking, holes in open-source projects are found by contributors much faster than by malicious attackers. If Flash really was a security concern, and I don't believe it is, I would personally rather have it open-sourced than closed source. The very intelligent hackers that would find the holes faster than open source contributors, are probably capable of finding the holes regardless of their possession of the source code (or lack thereof). That, however, is an entirely separate issue.
Second, can you post some more specific details about concerns you have about Flash? I really don't see how your concern is any different than the standard concern about any open-source project. A lot of that comes down to opinion, and has already been overly debated. I've look at a lot of Adobe's open-source stuff, and I'm of the opinion that almost all of Flash is already open-source, and that it presents very little security risk. Both products I posted have a very healthy following of people looking over the code and reporting issues. Other than your opinion, what are you basing this question on?
edit: Perhaps it's clearer to ask the question: What's different between Adobe finding bugs in their closed-source code and Microsoft finding bugs in their closed-source code? And yet Linux finds itself with much fewer attacks in the wild - because the people who know Linux best are the ones maintaining the code!
- coderdude 17y agoThe difference is that most open source projects start out open. They also don't start out on 95% of computers. Let me put it this way: if Windows were open sourced today, would Windows users be safe? Would the legion of "Good Hackers" be quicker and brighter than the legion "Bad Hackers?" There is no possible way, on a level playing field, that we would not be attacked by several new exploits a week. Every day possibly.
- bediger 17y agoIf Windows were open sourced today, would Windows users be safe? No. Parts of Windows have such bad design that they'll never be safe. Big example: the silly "attributes" that don't include "executable". Having a file name determine executability is prone to human errors, especially since a definitive list of "extensions" that make a file executable is not forthcoming. But if you open-sourced it, someone would eventually provide you with that list of "extensions".
- TallGuyShort 17y agoThat's a valid point, and a good one I think. Personally though, I still think the benefits outweigh the dangers - especially given the points bediger adds.