774
Big tech security
(lemmy.nz)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 07 Oct 2025
774 points (99.6% liked)
Programmer Humor
34135 readers
3311 users here now
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.
founded 3 years ago
MODERATORS
Since they force everything to be open source and i think has strict rules, no
I mean, there are many excellent open source malware.
The ??? Is mostly phishing campaigns, I think.
That's the thing though if it's open source and 99.9% don't check that 0.1% checking it will be enough.
The trouble with smaller open source software is that there's no 0.1% checking it. And from time to time a small projects becomes widely used and everyone assumes someone already checked it; it's a widely used open source software, after all.
I have the same skeptical mindset as you here, but like Wikipedia still seems fine.
I think most early users do check further than open source licenses. It's possible they'll add things later, but if they add after it has enough users we have significant number of users to have some people check. And if the user base is small then they're probably more involved, or are reading/modifying code for their use cases.
Of course it's not foolproof, but it has worked for a long time because of things like that
Thank God for Tylenol.
By definition in order to have . 1% then the sample size must be greater than 1,000. The vast majority of open source projects will not get to this level.
I think for a open source projects with such a low number of users, the first few users will definitely look further than "it's open source".