petsoi@discuss.tchncs.de to Linux@discuss.tchncs.de · 1 year agoAMD Open-Source GPU Kernel Driver Above 5 Million Lines, Entire Linux Kernel At 34.8 Millionwww.phoronix.comexternal-linkmessage-square7fedilinkarrow-up131arrow-down10cross-posted to: [email protected][email protected]
arrow-up131arrow-down1external-linkAMD Open-Source GPU Kernel Driver Above 5 Million Lines, Entire Linux Kernel At 34.8 Millionwww.phoronix.competsoi@discuss.tchncs.de to Linux@discuss.tchncs.de · 1 year agomessage-square7fedilinkcross-posted to: [email protected][email protected]
minus-squareImacat@lemmy.dbzer0.comlinkfedilinkarrow-up10arrow-down1·1 year agoOpen source code isn’t immune to exploits. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior. The upside of open source is that a well intentioned person might find a vulnerability and get it fixed. Up until then it might be someone’s 0 day.
minus-squarejustastrangerlinkfedilinkarrow-up2arrow-down4·1 year agoYou’re talking about exploits. They were talking about backdoors. The are not the same thing.
minus-squareImacat@lemmy.dbzer0.comlinkfedilinkarrow-up10·1 year agoOpen source code isn’t immune to backdoors. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior. The upside of open source is that a well intentioned person might find a backdoor and get it fixed. Up until then it might be someone’s backdoor. Better?
Open source code isn’t immune to exploits. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior.
The upside of open source is that a well intentioned person might find a vulnerability and get it fixed. Up until then it might be someone’s 0 day.
You’re talking about exploits. They were talking about backdoors. The are not the same thing.
Open source code isn’t immune to backdoors. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior.
The upside of open source is that a well intentioned person might find a backdoor and get it fixed. Up until then it might be someone’s backdoor.
Better?