56
submitted 5 days ago by [email protected] to c/[email protected]

cross-posted from: https://lemmy.ml/post/30846701

The question is simple. I wanted to get a general consensus on if people actually audit the code that they use from FOSS or open source software or apps.

Do you blindly trust the FOSS community? I am trying to get a rough idea here. Sometimes audit the code? Only on mission critical apps? Not at all?

Let's hear it!

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 2 points 3 days ago

Depends. I read the PKGBUILDs of all AUR packages I install at least, which is not the same as reading source code but it's something. If it's a very widely used piece of software I don't bother—if all these people haven't spotted some secret backdoor, I as a lay person am not going to be the one to spot it. I will read small things like bash scripts or in general the more "obscure" software I run will be some kind of script. But also if you're going to publish malware in a script you're probably obscuring the malicious function so that someone doing a preliminary read won't spot it.

this post was submitted on 29 May 2025
56 points (95.2% liked)

Privacy

38209 readers
229 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS