* * * Y o u r . S h e p h e r d . A q u i l a . D e u s . ( d 2 0 0 5 x
x , d 2 0 0 4 x x , d 2 0 0 3 x x , d 2 0 0 2 x x ) * * * wrote:
wrote:
having source code means you're kept safe!
Not unless you are actively looking at all the code you install and are
a secure programming expert. I don't, and I am not.
Since exploitable code is widely installed and used, obviously having
source code isn't a free security blanket. It does mean independant
review is available, and without source code this is just impossible,
but it doesn't guarantee security. For it to provide any security
benefit you also have to stay up on those independant reviews and pay
attention to your distro's updates.
Having source code available does bring a LOT of benefits, but I think
the security card is a little overplayed quite often.