3 ms·
Being able to inspect the code is a necessary but insufficient measure for being secure. If you cannot inspect the source code, you are not fully aware of how t
by Seirdy 6y ago
Being able to inspect the code is a necessary but insufficient measure for being secure. If you cannot inspect the source code, you are not fully aware of how the program works.
Tools like strace can help you analyze a program's behavior from the outside, but you get limited insight into its internals (e.g., what algorithms is it using?).
Being open source does not automatically make software more secure. A successful compilation doesn't automatically make your code bug-free. Yet both are necessary to achieve the desired goal: security and correctness, respectively.
- whynotminot 6y agoHow often do you inspect the code of the open source programs you use every day? How about when updates come out? Do you check again? Or, do you trust that someone has looked at it? How much faith do you have in someone out there in the community? My point isn't that open source isn't a good thing--my point is that it's not the silver bullet a lot of people blindly assume it to be. Hence the second line of my post: > In theory it means something could maybe be safer, but it far from guarantees it.