53 ms·
I think open source is not the end solution, though is a great solution. As with any software there are always vulnerability just waiting for someone to exploi
by yeukhon 13y ago
I think open source is not the end solution, though is a great solution.
As with any software there are always vulnerability just waiting for someone to exploit. Before we say "oh government contractors suck", judge our any private product out there. Github is not open source and yet people constantly find vulnerability.
What we need is proper security audit, done by the right professionals and done continuously. The problem is security professionals are very very expensive! That may be the incentive to open source since then the crowd can be your testers. But the thing is: how do we apply to private customers? Not every company can open source their work. What can we do? Are security audit tools out there enough? Can we do better?
Should military stuff be open source? Because of national defense? Well, voting system is a national priority and if hacked can mean a big national crisis. So why shouldn't F16 software be open-sourced? It would make system cheaper, more reliable in theory. No one wants to do that. So if you believe in keeping military system private, how should the government keep their system secure and reliable? What tools do they get?
Trade market. They can't open source their trading system. How can they make the system more secure and reliable? What tools can they use while keeping some maintenance cost down? (maybe a bad example since trading system is managing TONS of money).