|
open source has spoiled the children, the thought that openly viewable code somehow makes for better security due to flaw identification and the update that comes afterwards is foolish. While it's true that flaws are found and updated by the public or the creator the time from identification to fix leaves the software knowingly at risk and even after the fix the users of the software are still at risk until they get the patch/update. Closed source is better secured, yes obscurity is good security, so long as it's not forgotten and checked/updated every so often. Put it this way is it better that the whole world knows you keep a spare key to your home under your doormat or if only a few people in the world know? I mean sure if everyone on earth knows your key is under your doormat someone can tell you that you need to get rid of the spare under the doormat but if your at work you have to wait to get home all the meanwhile everyone knows that your key is under the doormat unless you fixed the situation. So is that more secure than just a few people knowing and no one really telling you you shouldn't have it there.
|