lemmyreader@lemmy.ml to linuxmemes@lemmy.worldEnglish · 6 months agoBackdoorslemmy.mlimagemessage-square18fedilinkarrow-up19arrow-down10file-textcross-posted to: autism@lemmy.world
arrow-up19arrow-down1imageBackdoorslemmy.mllemmyreader@lemmy.ml to linuxmemes@lemmy.worldEnglish · 6 months agomessage-square18fedilinkfile-textcross-posted to: autism@lemmy.world
minus-squareoce 🐆@jlai.lulinkfedilinkarrow-up0·6 months ago Crowd sourcing vulnerability analysis and detection doesn’t make open source software inherently more secure. It does, because many more eyes can find issues, as illustrated by this story. Closed source isn’t inherently bad, but it’s worse than open source in many cases including security. I think you’re the only one here thinking publishing PoC is bad.
minus-squareSquare Singer@feddit.delinkfedilinkarrow-up0·6 months agoBut this issue wasn’t found because of code analysis per se, but because of microbenchmarking.
It does, because many more eyes can find issues, as illustrated by this story.
Closed source isn’t inherently bad, but it’s worse than open source in many cases including security.
I think you’re the only one here thinking publishing PoC is bad.
But this issue wasn’t found because of code analysis per se, but because of microbenchmarking.