{"id":2420,"date":"2026-08-05T06:34:44","date_gmt":"2026-08-05T06:34:44","guid":{"rendered":"https:\/\/abilit.eu\/?page_id=2420"},"modified":"2026-08-05T14:39:41","modified_gmt":"2026-08-05T14:39:41","slug":"faq-doesnt-being-opensource-imply-a-security-threat","status":"publish","type":"page","link":"https:\/\/abilit.eu\/index.php\/faq-doesnt-being-opensource-imply-a-security-threat\/","title":{"rendered":"FAQ: \u00ab Doesn\u2019t being Opensource imply a security threat ? \u00bb"},"content":{"rendered":"\n
\n\n\n\n

FAQ: \u00ab Doesn\u2019t being Opensource imply a security threat ? \u00bb<\/h1>\n\n\n\n
\n\n\n\n

The term \u201copen source\u201d or \u201cfree software\u201d <\/em><\/strong><\/a>simply means that you have access to the source code, which allows you to check it for any security vulnerabilities, backdoors, hidden features, etc. By choosing software with published source code, you can double-check that no such issues might arise.<\/p>\n\n\n\n

What if I don’t have time\/ressources to check it ?<\/h2>\n\n\n\n

You do not need to check it yourself. As free software (for example, released under the GPL licence<\/em><\/strong><\/a>), its source code is available to the Community and is therefore checked by numerous users, developers and would-be users. For example, the source code for the Linux kernel is accessible worldwide; it is therefore checked on a daily basis, even by the most demanding customers, such as NASA<\/em><\/strong><\/a>, ESA<\/em><\/strong><\/a>, NSA, Google<\/em><\/strong><\/a>, IBM<\/em><\/strong><\/a>, CERN<\/em><\/strong><\/a>, \u2026 not only for its security, but also for issues relating to stability, performance, reliability, and so on.<\/p>\n\n\n\n

The source code for the Linux kernel (the world\u2019s most widely used operating system<\/em><\/strong><\/a>) is extremely trustworthy, very stable and free from any backdoors, despite certain satirical publications, such as<\/p>\n\n\n\n

\"The<\/figure>\n\n\n\n

Software whose source code cannot be verified (proprietary software<\/em><\/strong><\/a>) offers no guarantee of stability or security<\/em><\/strong><\/a>, other than the level of confidence you grant to its publisher\u2026 <\/h3>\n\n\n\n

This is a decision that must be taken with great caution, especially as it has been common knowledge for years, if not decades, that the major proprietary software publishers (mainly US) have collaborated with espionage or intelligence agencies<\/em><\/strong><\/a>, thereby undermining any trust that might be placed in such organizations and\/or countries.<\/p>\n\n\n\n

\"Major<\/figure>\n\n\n\n

Even security-focused software, such as the OpenSSL library<\/em><\/strong><\/a>, SSH<\/em><\/strong><\/a>, OpenVPN<\/em><\/strong><\/a>, RSA implementations<\/em><\/strong><\/a>, TOTP<\/em><\/strong><\/a>, \u2026 is open source software: security through obfuscation is not a requirement; publishing the source code is a better way to ensure its robustness, as it allows external experts to verify that it contains no potential vulnerabilities.<\/p>\n\n\n\n

Conclusion: <\/h2>\n\n\n\n

The use of a software that is delivered to you, also in source-code format is the best way to ensure its stability, reliability, security, aside of its Long-Term maintainability<\/em><\/strong><\/a>.<\/h3>\n\n\n\n

On the same subject, read here about \u00ab Does using Scada-LTS implies you to have remote access to it ?<\/em><\/strong><\/a> \u00bb<\/p>\n\n\n\n

Don’t miss neither our related page, about “Why Linux and not Windows ?<\/em><\/strong>“<\/a><\/p>\n\n\n\n

\n\n\n\n
\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

FAQ: \u00ab Doesn\u2019t being Opensource imply a security threat ? \u00bb The term \u201copen source\u201d or \u201cfree software\u201d simply means that you have access to the source code, which allows you to check it for any security vulnerabilities, backdoors, hidden features, etc. By choosing software with published source code, you can double-check that no such […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2420","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/pages\/2420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/comments?post=2420"}],"version-history":[{"count":7,"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/pages\/2420\/revisions"}],"predecessor-version":[{"id":2462,"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/pages\/2420\/revisions\/2462"}],"wp:attachment":[{"href":"https:\/\/abilit.eu\/index.php\/wp-json\/wp\/v2\/media?parent=2420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}