4 ms·
This is why the assumption that “open source code is more likely to be closely audited for vulnerabilities” is not true (even for incredibly core/important proj
by rmdashrfstar 6y ago
This is why the assumption that “open source code is more likely to be closely audited for vulnerabilities” is not true (even for incredibly core/important projects with a wide scope) and is potentially dangerous to rely on.
- ngcc_hk 6y agoIt is not 100% and always. But practically. Especially unexpected leak.
- tal8d 6y ago> This is why the assumption that “open source code is more likely to be closely audited for vulnerabilities” is not true... That is a safe assumption, otherwise you'd have to believe that non-open source code is more closely audited - at greater expense, because businesses secretly prioritize security.