下了兔子洞,第2部分:为确保安全性和保密性,需要开源

能够直接访问源代码,是确保一个软件的安全不可否认的好处

肖像历史

我目前正在着手的追求,使我的整个生活私密性和安全地,同时还具有良好的时间和享受现代世界的成果。在这篇文章中,我不会进入我为什么这样做。为此,请参阅my article introducing this endeavor.

我想谈谈现在有一些相当高层次的东西,奠定了基本规则,如果你愿意,什么我试图完成。

首先,让我们说这一切都不是关于我开始开源要么free software. Licensing of software, while extremely important, is not the focus here. This is about privacy and security and absolutely nothing else.

--------------------------------------

Follow Bryan Lunduke’s quest to make his life as private and secure as possible:

--------------------------------------

That said…

If my goal is to secure all of my computing devices, I need access to the source code in order to do a complete and effective security appraisal of the software I am running.

It really is that simple. The need for open source software, in this case, has nothing to do with any ethical implications of software freedom—nor do the benefits of open source to software developers enter into this discussion. But having access to the source code is an undeniable benefit in ensuring the security of a piece of software.

To prove this point, let’s look at a hypothetical situation.

假定装满牛奶桶已坐在太阳一周是直接你上面。它的凝结和时髦和臭连天。

两个按钮在你的面前。双方都应该执行一个简单的,但关键的功能是在你的脑袋不倾倒腐烂,可畏的桶。易而重要。

Underneath the button on the left reads the following message:“Proprietary, closed source code. Copyright 2016 SomeRandomCompany. All rights reserved. All requests for code will be ignored. But we totally swear we won’t dump the milk on your head. Pinky swear.”

The button on the right reads:“Open Source code available to all. Reviewed and contributed to by hundreds of developers from around the world. Feel free to review the code and speak with the programmers before pushing the button.”

哪一个你按?

Easy answer, right?

现在,在理论上,一个并不需要在所有按任何按钮。这似乎是确保安全的桶(而不是在你的头)里面的东西,是一次奶住宿的最佳途径。只是不要按下一个按钮,对不对?但是,这全矿的努力是生活在现代社会。这是关于利用现代计算设备和数字通信。我显然会推动的一个按钮。这只是一个与我的拇指选择最安全的按钮来戳的事。

这使我对我的第一个关键决定在确保我的生活:

I am going to use only open source (and, when possible, free software) on my computers, phones, tablets, servers and any other computing devices I have control over.

寻找开源软件的一切是很难比你想象

This is both easier and harder than many people might think.

On the one hand, running a completely open operating system, office suite, web browser and the like is astoundingly simple. Grab one of the (many) open source (and free software) operating systems (such as Linux), and you’re off and running.

至少在你的桌面和laptop computers.

但是,当我们开始谈论的东西那样简单,比如说,选择用于发送和接收消息(文字,语音和视频)的平台,事情变得有点难度。

Let’s say, for example, I choose to useSignalfor messaging. It’s encrypted (which is great) and provides a significant amount of源代码under great licenses (also great). But their server also has a large amount of proprietary, closed source code (dealing with making voice calls) that I cannot currently get access to.

That gives me pause. It is, based on what little I have written here, already preferable over solutions such as Google Hangouts and other, far-more-closed services. But the existence of any code that cannot be vetted, tested and analyzed (publicly) by independent programmers raises a not-so-subtle red flag.

So, decision made. Only open source (and/or free software)—at least when possible. And when it isn’t possible, steps should be taken to fully understand both the scope and possible implications of having my data handled by source code that I cannot 100 percent verify the actions of.

I still have a long, long way to go, including:

  • 我连接到互联网的方式
  • How I handle all forms of communication (from email to phone calls to video chat)
  • 我在哪里存储数据(以及我如何与他人分享)
  • 我如何相互保护的软件件
  • 我如何处理地图和步行/行车路线

So many things. So many.

It’s almost overwhelming, but I shall persevere.

加入对网络世界的社有个足球雷竞技app区Facebook的LinkedIn对那些顶级心态的话题发表评论。

版权© 2016Raybet2

IT Salary Survey:结果是在