• Jeena@jemmy.jeena.net
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    This only would work if you check every line of source code, even the dependencies and build chain, and then build it yourself. See xz utils backdoor or heartbleed, etc.

    • Excrubulent@slrpnk.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      The whole point is that at some point somebody can check, and you can have a higher level of trust in that than proprietary software.

      And if someone does something like this then it has to be disguised as an innocuous bug, like heartbleed, they can’t just install full on malware.

      It’s a different beast entirely.

    • Autonomous User@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      4 months ago

      check every line … yourself.

      🚩🚩🚩

      A very classic lie, disinformation, used to spread anti-libre software. Anti-libre software bans us, not only me but everyone else, from removing malicious source code.

      • Jeena@jemmy.jeena.net
        link
        fedilink
        English
        arrow-up
        0
        ·
        4 months ago

        Very disingenuous of you to fight a strawman and proclaim victory by claiming that I said things which I never did. But if that’s what floats your boat. But for everyone else, try to find any mention of anti-libre software in the original claim.

    • hydroptic@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      4 months ago

      Exactly. Neckbeards love to pretend open source magically has no security vulnerabilities, and that the ability to inspect the source means you’ll never install anything nefarious.

      I expect all of them to have read the source for every single package they’ve ever installed. Oh and the Linux source too, of course

      • Autonomous User@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        4 months ago

        Another classic lie. ‘Open source’ misses the point of libre software. Anti-libre software [malware] bans us [everyone else] from removing malicious source code.