Slashdot Mirror

← Back to Stories (view on slashdot.org)

Open Source Code Isn't a Warranty (opensource.com)

Posted by timothy on from the you-get-to-keep-and-fix-both-pieces dept.

An anonymous reader writes: Automotive software issues such as the Jeep hack and Volkswagen cheating on emissions tests have made headlines this year, which means the public is thinking about software in cars like never before. Some experts have argued that mandating that such software be open source is a solution to the problem. In an article on Opensource.com, Ben Cotton writes that although there are definite benefits to public scrutiny of the software, code visibility alone is no guarantee. It's an important thing to bear in mind, because "Open, therefore secure" is an easy straw man to knock down.

5 of 214 comments (clear)

  1. However.. by Anonymous Coward · · Score: 4, Interesting

    The more insight into code, the less likely companies will do what VW did because its open to public scrutiny. I think we should be focusing on the "Open, therefore open to scrutiny" than the misconception of "Open, therefore secure".

  2. "Open, therefore secure" by gQuigs · · Score: 4, Interesting

    or maybe...

    Open, therefore not illegal to review?

  3. Re:Guarantee by ShanghaiBill · · Score: 4, Insightful

    I think the better word choice is "guarantee" instead of "warranty" for the headline.

    Also, "visible source" would be better than "open source". Unless they actually mean that anyone should be able to copy, modify, fork, and redistribute.

  4. Duh... by gweihir · · Score: 4, Insightful

    Another stupid comment by people that do not understand the difference between a "necessary condition" and a "sufficient condition".

    Open-sourcing the software/firmware in question is a necessary thing. That means it must be done. It is not a sufficient condition. That means it is not enough. It still must be done, but other things must be done in addition to get the desired outcome.

    It is almost as if people do not understand basic logic anymore. No surprise so many things in the IT space get screwed up badly these days.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  5. Re:Guarantee by Capt.Albatross · · Score: 4, Insightful

    I don't have the time or resources to verify the software of my car

    I don't have the time or resources to replace a bad head gasket in my car. But I am not going to buy a car with the hood welded shut.

    Many of the things you use are welded shut - integrated circuits, for example.