3 ms·
Yup. The tire fire of the security industry is saying that letting other people look at the code is a security risk. Personally, I think maybe they got scared
by bradknowles 9y ago
Yup. The tire fire of the security industry is saying that letting other people look at the code is a security risk.
Personally, I think maybe they got scared that someone might figure out that their code is worse than everything else on the planet, and so they want to try to put the clothes back onto the Emperor.
- averagewall 9y agoNot sure that applies in this case. If the only party you allow to look at your code is one that's heavily invested in secretly hacking it, then you're probably going to give them some zero-days which they'll use maliciously. It's different if you let everyone look at it, since a white-hat might find something helpful. But this isn't a choice between everyone and no-one, it's between a known black-hat and no-one.
- KSteffensen 9y agoWhy is it not a choice between everyone and no-one?