• 0 Posts
  • 39 Comments
Joined 1 year ago
cake
Cake day: July 13th, 2023

help-circle














  • I think you asking me for “quality study” informs me that I don’t want to talk to you about this anymore.

    I understand ideologically you’re all for open source software (so am I, but you can’t see that) and you believe there is no merit to close sourced software. You believe open source software is inherently more secure and nothing will convince you otherwise and to be honest I just don’t care.

    In the real world your argument falls flat, the ideology is great but practically it doesn’t shake out that way. If you’re incapable of recognizing the merits AND flaws in both systems then I don’t have any desire to continue talking to myself.

    I’ve not at one moment argued against anything other than your narrow view, I am a proponent of open source software and am a contributor to a project I guarantee impacts your life every day. I’m not shitting on open source and never would.

    All of the things you say CAN make it better and many times do. That said it doesn’t inherently make it better and just because you crowdsource doesn’t mean you got it right. There is nuance. Democracy always fails on the idea that 1 Million Voices are smarter than 1, which isn’t always the case.

    Open Source Software ought to be used EVERYWHERE IT MAKES SENSE and not used where it doesn’t.

    The problem is when people make statements that just aren’t true to push for something that can stand on its own without false narratives.



  • prettybunnys@sh.itjust.workstolinuxmemes@lemmy.worldBackdoors
    link
    fedilink
    arrow-up
    4
    arrow-down
    2
    ·
    edit-2
    6 months ago

    I don’t need to repeat myself but that’s all I’d be doing.

    You’re making the argument that open source software inherently does this better and I’m telling you that you’re wrong. I’m going to cite myself, a 20 year veteran in the field.

    It can do it better and often times it does work out this way.

    Closed source software also has value and use and for its own set of reasons could make the argument that it is more secure because of access controls and supply chain management and traditional security mechanisms.

    I think you read what I wrote as a “no you’re entirely wrong” whereas what I said was “you’re asserting things that aren’t true which is weakening the argument”

    Frankly though given the lack of response to what I actually said by anyone I’m just going to rest on knowing in the real world my input is considered valid, here where we’re being fanatics … idk for all you know I’m a bot spewing AI generated drivel.

    Maybe the disconnect here is I’m talking about practical application because of experience vs theoretical application because of ideology.


  • This is literally how I make my living and this is the only comment I’ve made so I’m not sure where you get the idea I think publishing vulnerabilities and PoC are bad … again I literally do this for a living.

    Finding vulnerabilities and reporting them is literally what pays my mortgage. Open Source, Closed Source, they both have their merits but to say one is inherently more secure because of the reasons you’re specifying is tacitly false.

    My comment is literally only about what you said which pushes a thought that slides to far in one direction. There is a reason no nation state will open source their military hardware.


  • prettybunnys@sh.itjust.workstolinuxmemes@lemmy.worldBackdoors
    link
    fedilink
    arrow-up
    10
    arrow-down
    44
    ·
    6 months ago

    Crowd sourcing vulnerability analysis and detection doesn’t make open source software inherently more secure.

    Closed source software has its place and it isn’t inherently evil or bad.

    This event shows the good and bad of the open source software world but says NOTHING about closed source software.