Open Source is an interesting alternative, which adds the possibility of collaboration and customization in the development of the software, it allows developers to use the code or part of it for their own projects, this naturally offers many advantages. Now, many times I read several clearly wrong opinions about it. OpenSource is more secure and more private than closed source, which is completely false, it is not, it is not the first time that I have discovered Trojans and other malware in OpenSource. It is true that a developer can review the code, although this is not always easy in very complex software with up to millions of lines of code, many also pointing to external scripts, which also require revision. For this reason, many developers do not do it, limiting themselves to changing certain codes to adapt it to their needs or to create their own product. For this reason, security and privacy always depends on the activity of the creator / creators and the corresponding community, if any, to detect possible infiltrations by hackers, who also have access to the code of this software. The normal user, without great knowledge, has no possibility of verification, far from passing the product through VirusTotal or the AV that he uses. You must trust the product’s TOS and PP, in many cases not much better for privacy than other proprietary products. Of course, the free argument is also false, not all OSS is free, it can even have high costs. For this reason, I think that, to maintain the freedom and the great advantages that the OpenSource movement has, to put an end to these mistaken opinions and to make users aware of the real value that this movement has, so as not to lead them to a field of disappointment.
Preferably use OpenSource, but like any other software, avoid blind trust and check the application before using it and above all, importantly, always read the TOS and PP of the product, this avoids many annoyances. Avoid products whithout updates for a long time, which shows a lack of attention on the part of the developer.
keyword “eventually” many bugs have been around for decades.
That’s not exclusive to open source software.
Im pointing out open source is not magical in this.
Ah, right. That’s correct, of course. Just because more people can find bugs doesn’t mean they will.
are you being sarcastic?
No, why? The probability of people.finding bugs rises as more possibly knowledgeable people have access to the code, but that’s not a guarantee to find all the bugs. See PGP bugs, branch predicition bugs, heartbleed etc.
Basically I agree to what you said initially, some bugs have been around forever in spite of the code being openly available.
I just couldn’t tell I would have taken your word at just “no” :3. I’ve been in too many toxic spaces sadly + autism it gets hard to tell. Literally this. In order to stop writing bugs using languages meant to be memory safe like rust can help a lot, and also paying people to audit the code helps. It might just end up being that the newer languages with abstractions meant to preserve security like go, rust, d, etc. can be the technology we needed all along. Technology is more than physical, concepts and ideas are technology in the same way hardware can be.