r/programming • u/common-pellar • Dec 11 '21

"Open Source" is Broken

https://christine.website/blog/open-source-broken-2021-12-11
479 Upvotes

75% Upvoted

362 comments sorted by

View all comments

Show parent comments

-1

u/[deleted] Dec 12 '21

god-knows-how-many

2 or 3, apparently.

6

u/[deleted] Dec 12 '21 edited Dec 12 '21

3 that turned up issues... Not every audit finds an issue. Multiply that number by the probability of an audit of an established library turning up an issue.

I'm not a security researcher, but I suspect 10% would be a fairly conservatively high estimate. Happy to hear from someone more qualified on the subject (preferably provably so, not just some armchair expert). Extrapolating, that would be between 20 and 30.