1
vote
1answer
46 views

Is there a single site/org for responsible reporting of F/OSS application security vulnerabilities? [closed]

I believe I have found some security vulnerabilities in a popular open-source desktop application, and have contacted one of the application's project organisers via their website. I got in touch ...
5
votes
4answers
267 views

Verifying that open source software hasn't been tampered with

I'm about to download some OSS software, and I would like to ensure (with a reasonable degree of certainty) that it hasn't been tampered with to insert malware. Specifically, it's a password manager ...
1
vote
4answers
1k views

Proprietary vs open-source encryption/security software

I just had an argument with colleagues about the usefulness of Microsoft BitLocker drive encryption for keeping representatives of the state (FBI etc.) out of data. They were convinced that vendors of ...