> Sadly, for most users (read: people who don't program, or read HN, and even those who do), "Read the code and find bugs in it" is probably an impractical def

> Sadly, for most users (read: people who don't program, or read HN, and even those who do), "Read the code and find bugs in it" is probably an impractical defense, although it is the logically correct one from the cryptographic point of view. Actually, what gives me the warm fuzzies is that I can hire someone who knows what they are doing to read the code. So could a purely non-tech person. This can't occur with closed source software.