2 ms·
True, but just static analysis of private source code is likely to discover several vulnerabilities, forget about experts looking for them in the source code. H
by belltaco 6y ago
True, but just static analysis of private source code is likely to discover several vulnerabilities, forget about experts looking for them in the source code. How many companies even do security based static code analysis using state of the art tools?
- nominated1 6y agoThis kind of reasoning is why many of us avoid closed source software.
- mhh__ 6y agoAnd why having the confidence to open source your code is good for your customers. At very least it's pressure not to fix that bug tomorrow rather than after lunch.
- moocowtruck 6y agonot only that but internal projects that one can glean information from just by knowing or seeing their existence and how they are constructed. or for yet unreleased things.. I'm surprised the few comments in this thread don't consider these sorts of things