4 ms·
If you had every line of code that Google wrote, what would you do with it? But I found this discussion on HN. https://news.ycombinator.com/item?id=11790438 h
by scarface74 4y ago
If you had every line of code that Google wrote, what would you do with it?
But I found this discussion on HN.
https://news.ycombinator.com/item?id=11790438 https://news.ycombinator.com/item?id=11790438
- ameliaquining 4y agoWell, if you had the search ranking algorithms or the bot-detection algorithms or anything inherently adversarial like that, then you could do all kinds of nefarious things. But that stuff's locked down more tightly. Likewise with a few ultra-hard-tech things where the implementation's a major competitive edge.
- forgotusername6 4y agoI imagine looking for vulnerable areas of the code might be something people would be interested in doing. Maybe start with login or billing or something. You could also look at recent activity to spot new, unannounced projects. You could use blame to find who wrote what and target them for anything from job offers to social engineering attacks.
- ameliaquining 4y agoMost of that information is readily available on the corporate intranet without having to dig through source code. Security-by-obscurity isn't something to rely on (again, except in the case of things like abuse detection where there's no alternative).
- forgotusername6 4y agoYou aren't necessarily looking for things that would be defined as security by obscurity. You're looking for bugs with a security implication. With the source code, you can look for these bugs without arousing suspicion.
- saagarjha 4y agoPeople can find vulnerabilities without the code too.
- fatneckbeard 4y agoid make an art piece where each line of source code was printed 1mm high on the walls of a room. . . . .. . and then..... it would show the program counter "live" on the wall as code was executed. like it would shine a light on the line of code, like a realtime debugger.