The Xz backdoor and a near miss on the F-Droid app store show how the entitled attitude of some people in the open source community can be used to push malicious or insecure code.
  • tabular@lemmy.worldEnglish
    1·
    3 months ago

    How do you qualify the security of a closed source code when you can’t verify it?

    I’d bet on for-profit motive over passion-project when it comes to being tempted to do something wrong.