3 ms·

Considering most exploits are found via fuzzing tools, I think your assumption is pretty far away from reality. If people could casually look at code and see v

• krapp 12y ago
  But people can casually look at code and see vulnerabilities, any time they want. Although your point about the methods of exploits changing the dynamic is valid. >Also: MS Shared Source initiative Fair point.
  • drzaiusapelord 12y ago
    >But people can casually look at code and see vulnerabilities, any time they want. I think you're dismissing the level of experience, smarts, and inter-disciplinary knowledge it takes to find a bug like this. More than likely, even those with all those skills and at the 1% of them can't just eyeball code and go, "Ah yes, here." They're instead writing a lot of little tools and seeing what they can break. Then they go back, see what broke, and work out if its possible to exploit that exception or crash condition. These types of tools and methods work just as well with closed source. Attacking closed source seems very unfair to me in these scenarios.
  • freehunter 12y ago
    >But people can casually look at code and see vulnerabilities, any time they want. They could, but they don't. Same way I can look at the sky and see an asteroid. Possible? Sure. Likely? Not without some pretty advanced tools or a hell of a lot of luck.