4 ms·
How would you have found the bug without it being open source? You think companies pay for these open public audits on proprietary software?
by infinity0 13y ago
How would you have found the bug without it being open source? You think companies pay for these open public audits on proprietary software?
- sp332 13y agoThe vulnerability was first found by a fuzzer, which would have worked equally well on closed-source software. And I believe the fuzz tester (part of Codenomicon's "Defensics") is also closed-source.
- infinity0 13y agoYou misunderstand - how would the public have found out about the results of that audit? There is no incentive to release this information for a closed product; very much the opposite.