> Open sourcing would only help find non malicious bugs. 1. This isn't exactly true; Yubico as a whole might be trustworthy but that doesn't mean individuals

> Open sourcing would only help find non malicious bugs. 1. This isn't exactly true; Yubico as a whole might be trustworthy but that doesn't mean individuals within the company can't slip in something that looks benign but breaks security, and slips past the other developers. Such vulnerabilities are documented even in open-source code[1]. 2. Even non-malicious bugs can have security implications. [1] http://www.securityfocus.com/news/7388 http://www.securityfocus.com/news/7388