4 ms·
Pretty cool they’re open sourcing this, but now it will be much easier for malicious actors to find bugs in the service. A security compromise of such a system
by chatmasta 9y ago
Pretty cool they’re open sourcing this, but now it will be much easier for malicious actors to find bugs in the service. A security compromise of such a system would be catastrophic. Is it worth the risk of open sourcing in this case?
- JoeAnzalone 9y agoWon't it also be easier for non-malicious actors to find bugs and report them responsibly?
- zitterbewegung 9y agoWell if you have a million eyes looking at the source code maybe you would find more bugs. On the other hand before you release something that you want to open source it might be a good idea to do a security analysis of the code.
- CydeWeys 9y agohttps://en.wikipedia.org/wiki/Security_through_obscurity https://en.wikipedia.org/wiki/Security_through_obscurity