WEBVTT
00:00:00.200 --> 00:00:05.304
This is episode twelve …… of the Open Source Utopia Podcast.
00:00:07.440 --> 00:00:12.412
With open source, security is both a benefit and a challenge.
00:00:13.179 --> 00:00:18.885
But, what opponents of open source …… call a challenge is actually a benefit.
00:00:19.518 --> 00:00:27.493
The real challenge …… isn't making software open source, it's a problem with you and me.
00:00:28.161 --> 00:00:33.767
You see, in the physical world, security means locking something away.
00:00:34.167 --> 00:00:41.240
The critics of open source say …… openness is the main security problem …… with open source software.
00:00:41.240 --> 00:00:55.287
“If digital criminals can see the code,”“they will ferret out every way to attack its users.” Closed source software has an answer, and that is security by obfuscation.
00:00:55.722 --> 00:00:59.359
Or, as I call it, hiding the problem.
00:01:00.460 --> 00:01:06.900
In the digital world, transparency can create more and better security.
00:01:07.500 --> 00:01:16.775
So open source supporters, like me, and you, I hope by now, see a huge benefit in openness.
00:01:17.310 --> 00:01:24.784
Everyone can see the code and test the code, so it's hard to hide malicious functionality.
00:01:25.251 --> 00:01:32.959
Making my code public …… gives me an extra incentive …… to focus on code quality as well.
00:01:33.393 --> 00:01:43.469
And, if people find security issues …… in open source code, they can tell the thankful developer …… and even contribute a fix.
00:01:43.769 --> 00:01:53.980
So, the real challenge in open source security …… isn't software security, it's project sustainability.
00:01:54.581 --> 00:02:04.224
Making sure …… that there are enough people involved …… and supporting the project …… to reap the benefits of the openness.
00:02:05.625 --> 00:02:12.699
That is a job both for the developer …… and those who are using the software.
00:02:13.699 --> 00:02:18.037
Let's talk about Community Contribution.
00:00:00.200 --> 00:00:05.304
This is episode twelve …… of the Open Source Utopia Podcast.
00:00:07.440 --> 00:00:12.412
With open source, security is both a benefit and a challenge.
00:00:13.179 --> 00:00:18.885
But, what opponents of open source …… call a challenge is actually a benefit.
00:00:19.518 --> 00:00:27.493
The real challenge …… isn't making software open source, it's a problem with you and me.
00:00:28.161 --> 00:00:33.767
You see, in the physical world, security means locking something away.
00:00:34.167 --> 00:00:41.240
The critics of open source say …… openness is the main security problem …… with open source software.
00:00:41.240 --> 00:00:55.287
“If digital criminals can see the code,”“they will ferret out every way to attack its users.” Closed source software has an answer, and that is security by obfuscation.
00:00:55.722 --> 00:00:59.359
Or, as I call it, hiding the problem.
00:01:00.460 --> 00:01:06.900
In the digital world, transparency can create more and better security.
00:01:07.500 --> 00:01:16.775
So open source supporters, like me, and you, I hope by now, see a huge benefit in openness.
00:01:17.310 --> 00:01:24.784
Everyone can see the code and test the code, so it's hard to hide malicious functionality.
00:01:25.251 --> 00:01:32.959
Making my code public …… gives me an extra incentive …… to focus on code quality as well.
00:01:33.393 --> 00:01:43.469
And, if people find security issues …… in open source code, they can tell the thankful developer …… and even contribute a fix.
00:01:43.769 --> 00:01:53.980
So, the real challenge in open source security …… isn't software security, it's project sustainability.
00:01:54.581 --> 00:02:04.224
Making sure …… that there are enough people involved …… and supporting the project …… to reap the benefits of the openness.
00:02:05.625 --> 00:02:12.699
That is a job both for the developer …… and those who are using the software.
00:02:13.699 --> 00:02:18.037
Let's talk about Community Contribution.
