fSekrit as open source ?

[ytz997]

fSekrit might be ok, if it were open source !

- i have hard time trusting non open source program my passwords, especially when it says passwords can be trusted
  eg. program could make sure people save passwords using it, them deliver over net to some bad guys
  1) i can't have 100% trust in program author 2) program could be hacked, program modified
- it would be more secure, if it were open source, multiple variants using different tricks
  "A skilled malicious person *could* theoretically snoop the key and use it to decrypt your data"
  unskilled malicious person *could* achieve same thing - with a help of some software...
  more versions, lower possibility of such universal software.

[Eóin]

In fairness, even with an opensource app if you don't study the source code in detail and then personally compile your own versions they are no more trustworthy than distributed closed source binaries.

[TucknDar]

I guess in principle you could be right, but I would have no problem trusting f0dder's work. If there were any problems I'm sure they would've been reported a long time ago and that you wouldn't even see f0dder around here.

Since you're a new user, though, I understand well that you obviously don't know and trust the program author. But just do a search around the forum and look at f0dder's post and try to form your impression of his trustworthiness based on them

Oh, and welcome to the site and the boards

[warbird]

A firewall would prevent the program from connecting to the net, so that shouldn't be an issue.

[f0dder]

fSekrit source will be opened eventually - I'm a bit too embarassed by the source right now , but once I've cleaned it up enough, we'll get there.

[Renegade]

fSekrit source will be opened eventually - I'm a bit too embarassed by the source right now , but once I've cleaned it up enough, we'll get there.

-f0dder (April 27, 2008, 06:22 AM)

There's a comment thread in the dev section...

So f0dder? How many curses inside YOUR source code?

I know that when I have some hack to work around a bug in a library that I need, there's a good chance that the comments would make the Devil blush!

[f0dder]

For those who might still be on the watch-list for this thread, here's a little necromancy service for you: Open-sourcing fSekrit.