3 ms·
Are you positive that the binary blob of the open source project you just downloaded is 100% from the code in it's repo? If you're not, then it absolutely is n
by cube13 13y ago
Are you positive that the binary blob of the open source project you just downloaded is 100% from the code in it's repo?
If you're not, then it absolutely is not an improvement. The attack vector has just shifted slightly.
- dllthomas 13y agoYes, because nothing can ever improve security unless it is 100%. Using FLOSS, alone, is a marginal improvement in security, other things being equal. It can be combined with still other measures to make a bigger difference.