this post was submitted on 26 Oct 2024
95 points (76.8% liked)

Asklemmy

43722 readers
1315 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy ๐Ÿ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago
MODERATORS
 

I for one am going through quite a culture shock. I always assumed the nature of FOSS software made it immune to be confined within the policies of nations; I guess if one day the government of USA starts to think that its a security concers for china to use and contribute to core opensource software created by its citizens or based in their boundaries, they might strongarm FOSS communities and projects to make their software exclude them in someway or worse declare GPL software a threat to national security.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] digdilem@lemmy.ml 4 points 4 days ago (1 children)

How is that weakness different to installing closed source software?

[โ€“] Crashumbc@lemmy.world 1 points 2 days ago* (last edited 2 days ago) (1 children)

It's a different risk vector. While companies want your information to sell, they don't want to take over your computer to use it in a bot net or steal your bank information and clean out your account.

Open source by it's very nature relies on a lot of people having good intentions, free time, and knowledge for it to work well and safely.

[โ€“] digdilem@lemmy.ml 2 points 2 days ago

Actually - a lot of closed source programs are still vulnerable to the supply chain attacks you mention where a bad actor has got access to their codebase. This has happened and been reported on, plus I'm sure, plenty of occasions where it was hushed up for reputational reasons. And - much commercial software still uses FOSS dependencies, so is also vulnerable to the same situation you describe for that. Worst of both worlds.

I don't think either system is inherantly better than the other in terms of computer security. Each has different and overlapping vulnerabilities.