FutureBoy
Well-known member
- First Name
- Reginald
- Joined
- Oct 1, 2020
- Messages
- 669
- Reaction score
- 877
- Location
- Kirkland WA USA
- Vehicles
- Toyota Sienna
- Occupation
- Private Lending Educator
Being able to review is a good goal. But as an example, last year in the python community there was a very widely used package that was found to have spyware in it. Turns out that the spyware had been there for a long time but no one had been looking so everyone just used the package wholesale and just assumed it would be ok. I do believe that OSS is laudable and has some good points. But it isn’t the be-all and end-all that some people seem to hold it up as. Even OSS has its issues that people need to be cognizant of and taking into account.The point is that you can, and in fact, can have a true third-party audit. Security by obscurity isn't secure.
-Crissa