21
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 17 Jan 2026
21 points (95.7% liked)
Asklemmy
52218 readers
533 users here now
A loosely moderated place to ask open-ended questions
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- !lemmy411@lemmy.ca: a community for finding communities
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
founded 6 years ago
MODERATORS
If you are a corporation staking thousands or millions of dollars on some code, you hire someone to audit it. If you are a dude playing with apps on your phone, you accept the risk of ingorance.
In theory yes. But as an insider to a company that sells proprietary software...also no. LOL.
They build a lot of their stuff on top of opensource code. There has been the exact same exploits as open source projects, and even a few malware intrusions from either some devs deliberate sabotage or infected machine. Not every giant corporation is checking in depth like you assume they should be, they go on trust to save shareholder profits and if they do an external audit and its a zero day nobody* is catching it.
*there was that one a while back in an unrelated project where the only reason it was caught was a dev nerd noticed the very slight delay in network response compared to previous version. So caught by human feels wrong and not a diff of git
The question being answered was not, "What are the common practices for...?"