alt Hacker NewsI've heard that argument before, but has that actually been demonstrated? Ability to look at the code (especially in the age of AI) means that security researchers aren't the only ones who can look for bugs. For example, look at the bugs like copyfail that AI has recently uncovered in the Linux kernel.
Replies
ktm5j • today at 7:56 PM
Okay guys, I'm being downvoted for asking questions? Let's be real, OSS has not been proven to be more secure. If you think otherwise then please back it up, I'm okay with being proven wrong.
colordrops • today at 4:50 PM
You are grasping for straws. No one said open source is perfect. But it's just an obvious fact that open source is going to be easier to audit than closed source.
➕ show 2 replies
If an AI can find a vulnerability for a hacker, it will also find that vulnerability for a security researcher, so that point is moot.
There exists a danger that very good hackers will be able to find vulnerabilities by looking through the source code, but very good hackers find vulnerabilities without source code anyway.
Consider the following: Would you rather walk down a busy street hundreds of other people walking by, including police officers, good samaritans, and maybe people who want to do you harm, or would you rather walk down a dark ally with only four people in it?