maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   General (https://talk.maemo.org/forumdisplay.php?f=7)
-   -   Risks of open source (https://talk.maemo.org/showthread.php?t=34718)

Devil 2009-11-18 20:38

Risks of open source
 
Correct me if i'm making mistakes in my thinking process.

I was thinking about the N900, and that i am not buying it yet, and that is probably the reason i started to gather negative points about the device to relativate, which led me to a thing that i actually found interesting to see others, maybe more experienced developers or programmers, with a better perspective, comment on.

Which is, what are the consequences of open source for a mobile computer connected to the internet and gsm network?

What if there was some evil developer to create a trojan, maybe covered by an application, that slowly uses your Data for spamming or what not.
Or even makes undercover calls? sends out your contacts or text messages to marketing 'baddies'.

edit: request: norton for maemo :D

Texrat 2009-11-18 20:40

Re: Risks of open source
 
Those risks are significantly lower by sheer virtue of the code being open source.

EDIT: maemo shouldn't need Norton. ;)

andrewfblack 2009-11-18 20:43

Re: Risks of open source
 
I would be more worried about an application I can't see the source code of.

mece 2009-11-18 20:46

Re: Risks of open source
 
The risks you describe are not in open source applications but in closed source ones. Should someone create open source malware, other people could spot the bad stuff in the source code. With closed source you don't know what is going on in there.

wmarone 2009-11-18 20:48

Re: Risks of open source
 
Quote:

Originally Posted by Devil (Post 381300)
Which is, what are the consequences of open source for a mobile computer connected to the internet and gsm network?

No more or less than connecting any other Linux-based platform to the internet. Security is a process, one that many vendors take seriously.

Being closed source provides zero protection, as we have seen time and time again.

Quote:

What if there was some evil developer to create a trojan, maybe covered by an application, that slowly uses your Data for spamming or what not. Or even makes undercover calls? sends out your contacts or text messages to marketing 'baddies'.
You suggest this as a what-if for Maemo, when it is a "case in point" for Windows. Happens daily. The answer is that -you- should know who you are getting applications from and whether or not to trust your sources.

Most people download and install stuff like crazy and wonder why their systems are slow. They also don't install security patches and leave their systems perpetually connected directly to the internet, and suffer exploits. Users are the cause of, and solution to, all of their computing problems (since beer has little positive effect on printed circuit boards!)

yukop4 2009-11-18 20:50

Re: Risks of open source
 
Quote:

Originally Posted by Devil (Post 381300)
Correct me if i'm making mistakes in my thinking process.

I was thinking about the N900, and that i am not buying it yet, and that is probably the reason i started to gather negative points about the device to relativate, which led me to a thing that i actually found interesting to see others, maybe more experienced developers or programmers, with a better perspective, comment on.

Which is, what are the consequences of open source for a mobile computer connected to the internet and gsm network?

What if there was some evil developer to create a trojan, maybe covered by an application, that slowly uses your Data for spamming or what not.
Or even makes undercover calls? sends out your contacts or text messages to marketing 'baddies'.

edit: request: norton for maemo :D

the fact that it is open sauce will protect anyone to some degree -even criminals wanting a secure phone-the reaction to this situation could encourage spyware

hqh 2009-11-18 20:51

Re: Risks of open source
 
Quote:

Originally Posted by Devil (Post 381300)
What if there was some evil developer to create a trojan, maybe covered by an application, that slowly uses your Data for spamming or what not.
Or even makes undercover calls? sends out your contacts or text messages to marketing 'baddies'.

As pointed out, if you install open source apps from the maemo.org extras repository, the risk of that happening is insignificantly small.

But of course it should go without saying that installing unverifiable apps from random websites is a bad idea.

DaveP1 2009-11-18 20:53

Re: Risks of open source
 
Quote:

Originally Posted by Devil (Post 381300)
What if there was some evil developer to create a trojan, maybe covered by an application, that slowly uses your Data for spamming or what not.
Or even makes undercover calls? sends out your contacts or text messages to marketing 'baddies'.

It depends on where you get your software. Certainly malware can be written for Maemo and the source code may seem clean but may not match the compiled code. On the other hand, legitimate sites check these things.

brendan 2009-11-18 21:03

Re: Risks of open source
 
2 words

community review

Dave999 2009-11-18 21:09

Re: Risks of open source
 
Quote:

Originally Posted by brendan (Post 381333)
2 words

community review

communist review vs community review


All times are GMT. The time now is 23:52.

vBulletin® Version 3.8.8