4 ms·
Good comment about the level playing field. Open source doesn't essentially make the code more secure. But if Random Joe Hacker discovers an exploit, there is a
by wladimir 16y ago
Good comment about the level playing field.
Open source doesn't essentially make the code more secure. But if Random Joe Hacker discovers an exploit, there is a big chance he'll brag about it, report it, or at least it eventually makes its way to the developers.
On the other hand, if the source code is restricted to governments and security agencies, discovered exploitable bugs will be made part of some country' arsenal of "cyber weapons".
They will neither get fixed nor reported. That's very scary.
Open source doesn't fully solve this problem (agencies can still discover 'secret' bugs), but at least Joe Hacker has the same chance of finding them. This increases the chance they will actually be fixed significantly...