Even if the source code is made public, significant challenges remain in the areas of authenticating that the code running systems in the field matches the publicly released code, and it is still possible to find attack vectors for open source systems.