> Zero telemetry.
Q: Is Orion open-source?
A: We’re working on it!...[0]
Q: Is Orion truly safe if it’s not open-source?
A: The idea that "open-source = trustworthy" only goes so far...[1]
Q: Is Orion open-source?
A: We’re working on it!...[0]
Q: Is Orion truly safe if it’s not open-source?
A: The idea that "open-source = trustworthy" only goes so far...[1]
Don’t think it’s much different to use a closed source application than it is to use an open source app that somebody else compiled and put into your systems package repository.
Orion and Kagi (subscription search engine) are both great products, been using them for over a year, though I main FF.
What about the fact that in the case of the open source application, there are people not directly motivated to not mention problems for the good of the company, with the ability to look at the source code?
[12] yes, yes, yes, it is possible to run that proprietary tool through Ghidra (et al) to look for nasties as well but this is far harder, you don't just run a diff between two binaries.
Dealing with opensource project is way easy tbh.
lot of businesses live or die on the trust of their customers. don't they? arc's product is aimed at power users. surely if they were collecting telemetry and then trying to hide the fact they were transmitting it would be a critical blow when discovered.
so while i totally agree that they _could_ operate like that, in most cases there is very little to be gained and a lot to be lost by being intentionally deceptive.
so this will kind of diverge on what we consider as "proof", but i don't think that the software would need to be permanently monitored for a reasonable assurance.
the bar for proof would certainly vary though.