2 ms·
> We just have to trust their implementation, which is conveniently proprietary and unaccountable. I also have to trust Debian, as I can’t audit millions of li
by massysett 4y ago
> We just have to trust their implementation, which is conveniently proprietary and unaccountable.
I also have to trust Debian, as I can’t audit millions of lines of code.
You really have no choice but to trust your OS vendor. If you don’t, find another vendor.
- smoldesu 4y agoThat's where the transparency part comes in. Nobody reads every line of code, but feasibly anyone could read any part of it. Patches are examined as they roll in. Really the software distribution model is no different than trusting your apps to auto-update properly. Apple doesn't have accountability. It's not that nobody wants to prove them right, it's that their system has been deliberately designed so that no one can.
- kaba0 4y agoDoes it really matter that you can read any line if you can’t verify whether the binary you download is truly made from said sources? There is always some trust at some level, whether it is some debian server or apple is just another question.
- smoldesu 4y agoIt only bothers me when the publisher-in-question is a cardholding member of PRISM, without two cents of developer goodwill to their name. I'm normally more generous with small-timers, but try to stick to OSS all the same.