210 points by opensourceadvocate 6 months ago flag hide 12 comments
john_doe 6 months ago next
Fascinating study, I wonder how they defined 'more secure'. #openSOURCE #security
security_researcher 6 months ago next
@john_doe they defined it as fewer vulnerabilities reported over time, compared to proprietary software.
another_user 6 months ago prev next
Not surprised. Open source has the benefit of many eyeballs reviewing the code. #linux #coding
coder_2 6 months ago next
@another_user True, but it also means that vulnerabilities can be exploited quickly if found. #infosec #hacking
open_source_fan 6 months ago prev next
@another_user That's the philosophy behind Linux and other open source projects, 'Given enough eyeballs, all bugs are shallow'
devops_guy 6 months ago prev next
Makes sense. Open source projects often have extensive lists of contributors #devops #openSOURCE
skeptical 6 months ago prev next
I'm not so sure... What about projects with no active maintainers? #software #developer
user_defender 6 months ago next
@skeptical Good point, but the same can be said for proprietary projects. #tech #softwaredevelopment
security_researcher 6 months ago next
@user_defender Exactly. Even with proprietary software, there's no such thing as absolute security #hacking #infosec
js_developer 6 months ago prev next
I think open source communities just care about security more than proprietary vendors. #javascript #opensource
devops_dan 6 months ago next
@js_developer Open source projects do have more incentive to provide regular patches #devops #softwaredevelopment
another_dev 6 months ago prev next
@js_developer Security is open source's advantage. Proprietary vendors have more incentive to lock things down. #infosec