3 ms·
There are also people who think open source is the holy grail of security because "given enough eyeballs, all bugs are shallow". And is used as an argument. So
by belltaco 5y ago
There are also people who think open source is the holy grail of security because "given enough eyeballs, all bugs are shallow". And is used as an argument. So it cuts both ways.
- tcoff91 5y agoThe thing about dependencies is most people don't actually read the source. But at least you have the option.
- prepend 5y ago"given enough eyeballs, all bugs are shallow" Is certainly true, but that doesn’t make OSS the holy grail. In fact, I’ve never met anyone who thinks that. And “all bugs are shallow” doesn’t mean there are no bugs, it just means it’s easier to find bugs.