Yeah, I'm not sold on the "FLOSS is more secure" idea either. Good on you for trying to write down some arguments against it. But unfortunately, comparing the s

Yeah, I'm not sold on the "FLOSS is more secure" idea either. Good on you for trying to write down some arguments against it. But unfortunately, comparing the security of closed-source software to the security of open-source software is too difficult. You'd basically have to take two competing programs, one open, one closed, and spend many human-hours trying to hack both, and then publish your results. I believe that in such a test, open-source would perhaps have MORE security bugs. That's just what my gut tells me. Instead, people simply look at the number of security holes patched, and see that FLOSS projects report and fix many more holes. So surely FLOSS is more secure, right? Or, they rely on folk wisdom like "With enough eyes all bugs are shallow" which aren't any more proven in the real world than "FLOSS is more secure".