• Jeena@jemmy.jeena.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      This only would work if you check every line of source code, even the dependencies and build chain, and then build it yourself. See xz utils backdoor or heartbleed, etc.

      • hydroptic@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        4 months ago

        Exactly. Neckbeards love to pretend open source magically has no security vulnerabilities, and that the ability to inspect the source means you’ll never install anything nefarious.

        I expect all of them to have read the source for every single package they’ve ever installed. Oh and the Linux source too, of course

        • Autonomous User@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          4 months ago

          Another classic lie. ‘Open source’ misses the point of libre software. Anti-libre software [malware] bans us [everyone else] from removing malicious source code.

      • Excrubulent@slrpnk.net
        link
        fedilink
        English
        arrow-up
        0
        ·
        4 months ago

        The whole point is that at some point somebody can check, and you can have a higher level of trust in that than proprietary software.

        And if someone does something like this then it has to be disguised as an innocuous bug, like heartbleed, they can’t just install full on malware.

        It’s a different beast entirely.

      • Autonomous User@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        4 months ago

        check every line … yourself.

        🚩🚩🚩

        A very classic lie, disinformation, used to spread anti-libre software. Anti-libre software bans us, not only me but everyone else, from removing malicious source code.

        • Jeena@jemmy.jeena.net
          link
          fedilink
          English
          arrow-up
          0
          ·
          4 months ago

          Very disingenuous of you to fight a strawman and proclaim victory by claiming that I said things which I never did. But if that’s what floats your boat. But for everyone else, try to find any mention of anti-libre software in the original claim.

      • shortwavesurfer@monero.town
        link
        fedilink
        English
        arrow-up
        0
        ·
        4 months ago

        You’re right, I should clarify better. When I say open source, what I mean is totally open and totally free to contribute to, like the MIT or patchy licenses. Source viewable is a whole different can of worms and not what I mean, so I should be more specific in future.