LJ, what do you think of this warning on join-lemmy.org? (lemm.ee)

submitted 6 months ago by anidfb@lemm.ee to c/syncforlemmy@lemmy.world

28 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] Tier1BuildABear@lemmy.world 9 points 6 months ago

Isn't the point of open source that you can check the code for yourself though? Can't do that with closed source

[-] morrowind@lemmy.ml 5 points 6 months ago

Have you?

Or are you just trusting someone else?

I trust LJ

[-] Tier1BuildABear@lemmy.world 2 points 6 months ago

Have I what? Read all open source code? I was replying to someone else, and not about any particular app. It's just way harder to sneak something malicious into open source code than closed source, trust only gets you so far. It's just common sense.

[-] Zagorath@aussie.zone 3 points 6 months ago* (last edited 6 months ago)

You can check the code for unintentional vulnerabilities, or intentionally added in by a contributor, but you can't do anything about something intentionally added in later in the process by the person responsible for managing the build and distribution of the application.