Hacker News new | ask | show | jobs
by pjmlp 234 days ago
In theory, in practice it is obvious that too many eyes to the source keep missing CVEs.
2 comments
coldtea 234 days ago
Closed source also keeps missing CVEs, only most of them you never know because they aren't even making it to an officially released CVE. You usually don't even know what libs it uses and at what versions, never mind the proprietary code.

And then there's the closed source's Cloud part and its holes as well, which is a whole other can of worms.

link
pjmlp 234 days ago
I haven't said otherwise, other than the fallacy that being open by itself fixes those issues.
link
exe34 234 days ago
for me it's about running it locally/inside a wireguard network, and not having the rug pulled. not everything needs to be exposed to the internet.
link