And even when problems are found, like the heartbleed bug in OpenSSL, they're way more likely to just be fixed and update rather than, oh I dunno, ignored and compromise everybody's security because fixing it would cost more and nobody knows about it anyway. Bodo Moller and Adam Langley fixed the heartbleed bug for free.

[–] MaxVerstappen@lemmy.world 1 points 1 year ago (1 children)

Wasn't heartbleed in the wild for 2 years though?

[–] jcg@halubilo.social 1 points 1 year ago (1 children)

Yeah, but that just happens sometimes. With proprietary software you don't even have the benefit of being able to audit it to see if the programmers missed something critical, you kinda just have to trust that they're smarter than a would-be hacker.

[–] MaxVerstappen@lemmy.world 1 points 1 year ago (1 children)

I get that, I just caution that FOSS doesn't automatically mean secure.

[–] cyclohexane@lemmy.ml 2 points 1 year ago

Nothing is 100% secure. FOSS is definitely more secure, all else equal.