@nixCraft we don't have to concerned about this on #Mastodon. Although someone could develop the code , it would never be accepted at the repository level, let alone at the network level.
This is one of the reasons why Mastodon and #TheFediverse is very important
@nicholasr @nixCraft I don't think that's true. The code is already there, since Mastodon has an API that people can (and do!) use for bots. Using that for an AI persona, instead of, say, Picard insights, is a small step.
There's also the aspect that believing you're not vulnerable for something makes you inherently vulnerable for that thing because you let your guard down.
And third, just because something is open source does not mean that the code is rigidly reviewed.
@codingphysicist @nixCraft and I very much agree with you that developers and security experts have to always be aware of CVE. However there is some software that is just better designed and less vulnerable.
I 100% agree that #OpenSource does not = secure. However, if an open source project is very popular, used, and actively developed, then open source does have an advantage over proprietary