3 ms·

Pretty much all security is trust based. Any product you pick you trust the vendor not to fuck up or be corrupted. You can argue then lets just use open source

by rapsey 3y ago

Pretty much all security is trust based. Any product you pick you trust the vendor not to fuck up or be corrupted. You can argue then lets just use open source. Ok but is it that much of a security guarantee? Open source products are of limited functionality. It is great for web servers and frameworks, stuff developers care about. When it comes to feature rich client applications the track record is not nearly as good. Also who is going to pay the server costs?

Dah00n 3y ago
If there are no security audits by disinterested third parties, then it can clearly not be trusted. If they want trust and can provide it, they likely would have done this. Have they?
- rapsey 3y ago
  Sure but you then have to trust the auditors. It all ends up in trust.
  - Dah00n 3y ago
    Sure, trust in a third party that has a good reputation versus the company itself that says "trust us". Big difference.