3 ms·
>I know that people claim that open source is more secure because anyone can audit it, but I wonder how closely its security actually interrogated. The answer
by Dalewyn 2y ago
>I know that people claim that open source is more secure because anyone can audit it, but I wonder how closely its security actually interrogated.
The answer is that, no, nobody akshuarry audits anything. This has been proven time and time again, especially in the last few years.
>All of it gives me a bias towards using official sources from companies like Apple and Google, who presumably hire the talent and institute the processes to do things right.
What you get from commercial vendors is liability, you get to demand they take responsibility because you paid them cold hard cash. Free products have no such guarantees, you are your own liability.
- mid-kid 2y agoAnd we've seen time and time again how that liability "harms" them when they whoopsie daisy leak a bunch of data they shouldn't have gathered in the first place...
- graemep 2y agoWhat liability? How do they take responsibility if there is a security flaw?
- fl0id 2y agoEspecially as many licenses have liability disclaimers. Sure some enterprise stuff etc will have stronger guarantees etc but not by default probably
- yjftsjthsd-h 2y ago> The answer is that, no, nobody akshuarry audits anything. This has been proven time and time again, especially in the last few years. Sooo how about the audits linked in https://news.ycombinator.com/item?id=42592444 https://news.ycombinator.com/item?id=42592444 ?