Most free-as-in-price products that claim to be private and secure are open source. Since this program is closed source how do we know it is truly private and secure since it cannot be audited?

I agree and there are free independant security auditors available composed of multiple experts in various fields. After nearly a year from the public release of DarkMX, a independent security audit should be called to carry out their tasks to discern if further optimizing can be add via suggestions back to the developers of DarkMX and any use or errors found or leaking of unintended information that has been overlooked.

I'm sure a security audit by a independent panel of experts would come back fine however this can often spot further areas to optimize and work with the developers of DarkMX to add them. This should be seen as a win-win in my opinion.

There are many tests that can be undertaken without any effort by the Darkmx dev, what exactly are you guys suggesting ?

Please provide a list of these "free" security auditing experts.

What are their credentials? Who certifies they can be trusted? Who certifies they would even be competent to understand the complexity of the apps produced by this devteam?

And when new updates are issued every few days/weeks/months...it starts all over again?

Reality check.

This DEV has been releasing p2p programs for over 20 years now? Has any been shown to contain a trojan or backdoor?

Afew years ago I was working to engage the free software security auditing panel to which Schneier and other security experts in their various fields were panelists. The foss project lead developer at that time stated the newest beta release of Retroshare v0.6.0 wasn’t ready for a security audit and my efforts to put the two parties together for that wonderful opportunity was dashed.

At that time Bruce Schneier was of course the crypto expert Panelist, other experts were in regards to programming and importantly an expert in spotting and locating a security issue hidden in the coding, deliberately or accidentally. Normally such a service is costly and for FOSS projects and free software projects, that is a major reason many projects do not undergo independent security auditing by a team of experts dedicated to do that with quality expertise in multiple pertinent areas. I recall at that time a popular encryption application was audited by these folks. No security issues were found but several loops and coding were found to not be optimally coded and were immediately patched by the developer resulting in a better product overall.

I have left a post on Bruce Schneier's Security blog asking if the free independant software project security auditing panel still up and accepting requests?