A bad hacker will try to exploit it, but statistically speaking, you have more devs than bad hackers looking at your code. So, the chances are your code is more prone to be corrected instead of being hacked.
It doesn't mean that it won't happen. It will. But you have the statistics on your side
Just stop and think: if that, that you are saying, was the truth, why would companies use linux as their OS in their servers?
If that was the truth, nobody in the industry would use any open source software.
What we do observe is just the opposite: even huge companies not only use open source, but they publish their products as open source.
So yeah, the open source puts statistics in your favor. That's why it's not a contradiction
Just stop and think: if that, that you are saying, was the truth, why would companies use linux as their OS in their servers.
Because server stuff runs great on linux and arguably it has good privilege control (relative to alternatives). I think this is the customization argument though, not necessarily security argument. Stripping the OS down to run only your business logic and secure it to the max. But more hackers will target desktop users, not server stacks that have been configured by professionals to be secure. This is also why windows has been larger target for viruses - more desktop users with less technical know-how.
If that was the truth, nobody in the industry would use any open source software.
It's not that you can't make open source software secure, it's that open source isn't a magic wand for making it more secure. Someone has to actually make PR's, someone has to actually review them etc. Would you consider ElectronJs to be secure? I love it to death, but it has struggled quite a lot with security issues.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
A bad hacker will try to exploit it, but statistically speaking, you have more devs than bad hackers looking at your code. So, the chances are your code is more prone to be corrected instead of being hacked.
It doesn't mean that it won't happen. It will. But you have the statistics on your side
Just stop and think: if that, that you are saying, was the truth, why would companies use linux as their OS in their servers?
If that was the truth, nobody in the industry would use any open source software.
What we do observe is just the opposite: even huge companies not only use open source, but they publish their products as open source.
So yeah, the open source puts statistics in your favor. That's why it's not a contradiction
Because server stuff runs great on linux and arguably it has good privilege control (relative to alternatives). I think this is the customization argument though, not necessarily security argument. Stripping the OS down to run only your business logic and secure it to the max. But more hackers will target desktop users, not server stacks that have been configured by professionals to be secure. This is also why windows has been larger target for viruses - more desktop users with less technical know-how.
It's not that you can't make open source software secure, it's that open source isn't a magic wand for making it more secure. Someone has to actually make PR's, someone has to actually review them etc. Would you consider ElectronJs to be secure? I love it to death, but it has struggled quite a lot with security issues.