>You only to have to look at Java and Windows to know that security exploits can exist for years sometimes decades without anyone noticing them. Yes, and your

>You only to have to look at Java and Windows to know that security exploits can exist for years sometimes decades without anyone noticing them. Yes, and your point is? Security audits do mean much, that's why they are done. Open source means a lot as well, it means that if I don't trust a software, I can check it if I want to, rather than accepting what a company is telling me. There's a reason why cryptographic stuff is almost exclusively open source, it's because security through obscurity doesn't work. That said, the amount of exploits for open and closed source software is more of less equivalent, but the time to fix is usually shorter for open source code.