PDA

View Full Version : being opensource [es5]


View Full Version : being opensource [es5]


zab
October 3rd, 2003, 02:48 AM
the recent news about es5 should be a warning flag - you should not trust closed source software.

I'm not saying open source software is always better and more secure. However its much easier to discover security problems or malicious code - you don't have to be as good as RandomNut to find out if the programmers tried to do something nasty. And the programmers themselves know not to try nasty tricks because of that.

mr.jip
October 3rd, 2003, 02:53 AM
to be honest the only close software i dont trust is es5. Regardless of this recent find, i am suprised that peeps have used this pile of buggy shit.

aqlo
October 3rd, 2003, 03:32 AM
Good post zab :gj

I agree that open-source software is the only way to be sure what you are getting. There is a great tradition to back this up. Concepts and betas and RFCs should eventually lead to full and incisive documentaation. Anything you guys accept for regular use should probably be like this, gnuer than gnutella and freeer than freenet.

I realize that this may reflect badly on shareaza for some new people; I can only tell you that I know there has been no opportunity for oddball code since the "over-querying" hoopla, and that many people have tried to prevail on Mike to release the complete source, but he is a very busy person. There is however an open protocol for the G2 network which has passed substantial amounts of inspection.

As for ES5 I think we had some clues to this when we first discovered it was a webware hack with netmeeting doing the work. Lazy pseudo-code designed purely to get installations is never a good sign.

mr.jip
October 3rd, 2003, 03:45 AM
was the net meeting thing true? I read it a whle go that it was writtin on top of it.

aqlo
October 3rd, 2003, 03:47 AM
It was quite true when I did the beta Jip. Random Nut verified at one point that it was still true in the sense that they continued to use the .dll that makes it work, but it no longer ran you through standard installation for the program.

Malicious Intent
October 3rd, 2003, 05:23 AM
The ESV thing is big news, I'm surprised there isn't more about it in the forums. I braved going over to the ESV forums to find out if they are trying to respond, but there are a couple of people spamming the crap out of the place and I can't work out what is going on.
The spammers are posting the whole lot as well, I think simple facts would be more efficient for the average ESV user.
The scary thing is how so many people can and have verified what RN says so easily.
Do you think this will damaged ESV, or are ESV users just going to see it as the on going war between the rest of p2p and ESV?
hmmm

mr.jip
October 3rd, 2003, 05:27 AM
i doubt alot of es5 will stop using that client as they all seem to be as ignorant as each other. See'in this news just gives me yet another reason never agian to try this client.

aqlo
October 3rd, 2003, 05:46 AM
more efficient when in rome
:ass