4 ms·
If you’re depending on the confidentiality of your source code to keep your system secure, then your system was never secure in the first place.
by spideymans 6y ago
If you’re depending on the confidentiality of your source code to keep your system secure, then your system was never secure in the first place.
- asabjorn 6y agoThat is not a fair assertion, as source confidentiality to limit wide-spread computerized and manual inspection of backend code to find flaws is just one of many tools to mitigate attacks. For instance, in this case a group with sufficient security research skills politically opposed to some of the gab users seem to have utilized the source-code to find a vulnerability the Gab team had not discovered yet.
- kuschku 6y agoNot just one vulnerability, gab's CTO replaced every activerecord and stored procedure SQL call he could find with a string substitution based raw query (without any escaping or anything)