• PancakesCantKillMe@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    2 days ago

    “Kaspersky traced the malware back to Alldocube, a tablet maker that publicly shares its firmware archives for security vetting.”

    • bizarroland@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      My biggest concern, well, pretty much my only concern, with open-source software is that it’s entirely too plausible that even with the evidence publicly submitted that the manufacturer of the open source software has inserted malware, it still requires somebody else to come behind them and read what they have submitted and review it and sound the alarm.

      I use quite a bit of open source software, but I have never read the source code for the software that I use.

      I am entirely reliant on other people to do that for me. See 7-zip, notepad++.

      And the only recourse that I as a user have for being theoretically victimized by a malware distributor like this is to hope that the person faces legal punishment for their crimes.

      But I would still rather deal with all of that than ever give Microsoft a penny.