3 ms·
>Open isn't a magic bullet. As I understand, these latest CPU vulnerabilities were in the spec themselves. You could've found them by reading the manual. See wh
by mandelbulb 9y ago
>Open isn't a magic bullet. As I understand, these latest CPU vulnerabilities were in the spec themselves. You could've found them by reading the manual. See what good that did us.
How about, discovering it? That's one of the points of openness, not somehow being inherently better in a way. At least we have a spec manual in this case.
Also, audits should be peer-reviewed, that's difficult without openness.
- bastawhiz 9y agoHeartbleed was in OpenSSL for years before it was discovered. It was readily auditable with plenty of docs and specs and yet nobody noticed.