With a few exceptions, open source programs do generally rely on user reports and public forums to find vulnerabilities.

• 除了一些例外情况,开放源码的程序通常依赖用户报告和公共论坛来发现弱点。