56
submitted 5 days ago by [email protected] to c/[email protected]

cross-posted from: https://lemmy.ml/post/30846701

The question is simple. I wanted to get a general consensus on if people actually audit the code that they use from FOSS or open source software or apps.

Do you blindly trust the FOSS community? I am trying to get a rough idea here. Sometimes audit the code? Only on mission critical apps? Not at all?

Let's hear it!

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 15 points 5 days ago

I wouldn't say blindly, rather my heuristic is, the most long term and popular a project is, the less I'll bother.

If I do though get a random script from a random repository, rather than from say Debian official package manager from main contrib sources, then I will check.

If it's another repository, say Firefox from Mozilla or Blender then I won't check but I'll make sure it genuinely comes from there, maybe not a mirror or that the mirror does have a checksum that gets validated.

So... investment on verifying trust us is roughly proportional to how little I expect others to check.

this post was submitted on 29 May 2025
56 points (95.2% liked)

Privacy

38209 readers
229 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS