this post was submitted on 07 Jul 2023
1679 points (92.9% liked)

Memes

46009 readers
3549 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 5 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
1679
It's Open Source! (lemmy.dbzer0.com)
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]
215 comments fedilink hide all child comments
 

Not discrediting Open Source Software, but nothing is 100% safe.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 8 points 2 years ago (1 children)

Heartbleed is the only counter example anyone needs to know that open source isn't perfect. Intelligence agencies were likely sucking up encrypted traffic because nobody was paying attention to the most commonly used TLS library in the world

[โ€“] [email protected] 3 points 2 years ago

Sure, open source isn't perfect. No software of any reasonable size is. Anyone claiming otherwise is an idiot and should be ignored. And yeah sure, heartbleed vuln existed for 2 years before discovery. But don't forget the NSA held onto the EternalBlue vuln for over 5 years before the shadowbrokers leaked their tools.