Re:SolarWinds hackers were able to access Microsoft source code
by konceptz on Friday January 01, 2021 @11:22PM
(#25610363)
"It's not opening the source that makes the software more secure. It's enough reviewers or white hats looking at the code. Security vulnerabilities in Linux (both kernel and user space) show that regularly."
Thank you for that additional point, it's worth being said and helps us model the closed source alternative.
Yes. But with not enough eyes carefully reviewing the code security vulnerabilities will remain also in open source code. And once a bad actor finds it it will be easier to implement an exploit.
It's not opening the source that makes the software more secure. It's enough reviewers or white hats looking at the code. Security vulnerabilities in Linux (both kernel and user space) show that regularly.
Of course with closed source your external reviewers are zero, so that's not the solution.