[motters]

If the source code isn't available then any claims to being secure should be treated cautiously. For instance, how do we know that there aren't heartbleed-style errors in this anti-surveillance app?

[riquito]

I love open source, but we didn't know about heartbleed even with the sources available.

[skj]

I think that it's rather because the source was available, we eventually found out about heartbleed.