Technology

hideshow 10 child comments

parent

[–] Syldon@feddit.uk 12 points 2 years ago (9 children)

Everyone can audit the code you clown, that is the point. When it is hidden you cannot do this. If you are trying to be clever and demean my intelligence, let me put it another way, Everyone who can use google can audit the code. Writing code is not something restrictive, there are many, many guides out there along with syntax breakdowns.

Do you even know what the internet is?

hideshow 9 child comments

parent

[–] sebinspace@lemmy.world 9 points 2 years ago (5 children)

This is why I shouldn’t use Lemmy while I’m drunk. I don’t have any idea why I would have said something like that..

hideshow 5 child comments

parent

[–] Syldon@feddit.uk 5 points 2 years ago (4 children)

Not a problem, I am not fragile in the least. I hope your hangover is a short one.

hideshow 4 child comments

parent

[–] sebinspace@lemmy.world 4 points 2 years ago (3 children)

You ever write code while drunk and come back wondering why it works at all?

hideshow 3 child comments

parent

[–] netchami@sh.itjust.works 3 points 2 years ago (1 child)

My code works better when I'm drunk!

parent

hideshow 1 child comment

[–] sebinspace@lemmy.world 1 point 2 years ago

If only my father worked better when he was drunk

parent

[–] Syldon@feddit.uk 2 points 2 years ago

I haven't done any real coding since the 90's. Excel meant having the ability to write your own software from scratch redundant.

parent

[–] gayhitler420@lemm.ee 3 points 2 years ago (2 children)

Idk what the person you’re arguing with is trying to say, but as a prolific user of open source software, there are thousands of serious vulnerabilities discovered every time some auditing company passes its eye over github.

Malicious commits are a whole nother thing and with the new spaghetti code nightmare that is python nowadays it’s extremely hard to figure out which commits are malicious.

Open source software is not more secure by default and the possibility of audit by anyone does not mean that it’s actually getting done. The idea that anyone who can write software can audit software is also absurd. Security auditing is a specialized subset of programming that requires significant training, skill and experience.

hideshow 2 child comments

parent

[–] Syldon@feddit.uk 1 point 2 years ago (1 child)

My point was that everyone can do it, but not everyone will commit the time and energy to do it. This fact alone is why people prefer an open source product over the hidden schemes behind the likes of Google and Samsung. And you right you will never stop malicious elements trying to take advantage of the flaws that are inevitable in the complexity of software today.

parent

hideshow 1 child comment

[–] gayhitler420@lemm.ee 0 points 2 years ago

What I’m trying to push back on is your assertion that everyone can do it.

Security auditing is an extremely complex and specialized field within the already complex and specialized field of software development. Everyone cannot do it.

Even if it were as straightforward as you imply, just the prevalence of major security flaws in thousands of open source packages implies that everyone doesnt do it.

If I were to leave piles of aggregate and cement, barrels of water, hand tools and materials for forms, a grader and a compactor out and tell the neighborhood “now you can all pave your driveways” I’d be looked at like a crazy person because presented with the materials, tools and equipment to perform a job most people still lack the training and experience to perform it.