[John Robinson]

Obviously some secrets must be kept to secure data. But you cannot confuse a secret, such as a password, which is static, with a mechanism, such as an encryption algorithm, which is dynamic. You cannot exploit a static secret, it simply exists. On the other hand, you can exploit a dynamic mechanism, even a hidden one. You can input data and you can observe output from which you can possibly derive the mechanism. Not to mention, compiled code is in no way hiding a mechanism. A determined individual can easily reverse engineer any algorithm, as exemplified by a plethora of software cracks.

[Golden Eagle]

You can input data and you can observe output from which you can possibly derive the mechanism. Not to mention, compiled code is in no way hiding a mechanism. A determined individual can easily reverse engineer any algorithm, as exemplified by a plethora of software cracks.

Certainly, but that is not an effect that OSS protects you from as it has this same native vulnerability. But to freely distribute your complete source code to the entire world is a separate vulnerability all of it's own, and IMO is simply too much trust.

Goodnight.