| ▲ | packetlost an hour ago | |
The only way to know if software does what is intended is to use it. IMO that's the real value of OSS: software that has been executed many times by many people in many different environments, which overall increases the trust in the correctness of the system(s). | ||
| ▲ | addaon 12 minutes ago | parent [-] | |
> The only way to know if software does what is intended is to use it. No, testing and code audits also work. No amount of use of the software will tell you what else the software does beside what is intended (exfiltrate data, etc); testing and code audits both help with that. | ||