Der Vorteil von “Open Source”

[root_s2yse8vt]

Up

0

Down

::

Entschuldigung, wenn dies eine dumme Frage ist. Aber ich bin neugierig. Bei Linux verstehe ich den Vorteil, dass es “Open Source” ist. Die Benutzer können darauf aufbauen und verschiedene Distros entwickeln. Aber was ist der Vorteil von “Open Source” für Trezor? Entwickeln andere verschiedene Distros für meinen Trezor? Wäre er dadurch nicht anfälliger für Hackerangriffe? Was übersehe ich? Nochmals: Tut mir leid, wenn das eine dumme Frage ist. Ich weiß nicht, wie man programmiert. Ich versuche nur, das zu verstehen. Vielen Dank an alle 🙂

[AquamarineRevenge]

Up

0

Down

::

The advantage is that people using it don’t have to trust their entire crypto net worth to the developers of Trezor. They can simply go look at the code themselves and verify that nothing evil is happening.

In terms of what open source does to security, it’s kind of a double edged sword. More people can find more vulnerabilities which will result in more fixes which will result in less security vulnerabilities overall over time. But if someone can identify a security issue that hasn’t been fixed, and they choose not to report it, they could exploit it.

[Twoehy]

Up

0

Down

::

The bigger issue is that “Security through Obscurity” has been proven to be a terrible strategy over, and over, and over again.

With open source any obvious flaws will be found immediately, and it dramatically increases the odds that even non-obvious flaws are found and fixed more quickly, simply because the code can be evaluated by anyone, not just the people who wrote it.

[Crypto-Guide]

Up

0

Down

::

There are other vendors and projects who make use of code from Trezor, so can help to find issues, push improvments, etc.

You can also build and flash your own firmware, or diy build the device if you want to place less trust in the vendor.

[Autor]

Beiträge