3 ms·
The strength of open source lies in the number of eyes with access to the code. Perhaps I lack the wherewithal to identify security vulnerabilities in deployed
by D9u 13y ago
The strength of open source lies in the number of eyes with access to the code.
Perhaps I lack the wherewithal to identify security vulnerabilities in deployed code, but there's a good chance that there are others who are able to spot said vulns.
- gaius 13y agoActually, we don't know if there's a good chance or not. All the best cryptographers in the world, who aren't already working for intelligence agencies, are reliant on government funding (i.e. they're in academia). The fact that these have gone undiscovered so long suggests that finding them will not be trivial.
- aioprisan 13y agoability to spot algorithmic vulnerabilities on that level? and doing it for free? the chances are nill
- singold 13y agoNot completly for free if you use that software, and if you are an expert crytpo guy, it is probable that you use that software. I'm talking about vulnerabilities in crypto software no in email clients, browsers or office software (that probably they use too)