3 ms·
Open the code to public auditing. It's the only way. A million eyes will make short work of the cleanup.
by swayvil 6y ago
Open the code to public auditing. It's the only way.
A million eyes will make short work of the cleanup.
- acdha 6y agoIf you think that’s sufficient, you have some reading to do. Start with Ken Thompson: http://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf http://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thom... Now ask about all of the things opening source wouldn’t affect: beyond compilers, modern devices have a lot of software running in firmware which can alter data. Proving that every component involved in the process hasn’t been subverted is a massive undertaking.
- rapsey 6y agoThis is a dumb and harmful myth. Very, very few bother reading the source.
- tovej 6y agoThis is absolutely not a dumb myth. It's obviously true that open source is not sufficient to good software quality, or even necessary, but it does correlate, especially for open source projects with many users. I often read through the libraries I use in projects (if their source is available). And if I find errors or shortcomings I will write an issue about it.