4 ms·
> One concern is that the code includes security vulnerabilities I find this kind of funny, because open source is typically viewed as a benefit as far as secu
by lapcat 4y ago
> One concern is that the code includes security vulnerabilities
I find this kind of funny, because open source is typically viewed as a benefit as far as security is concerned.
Given how few engineers remain at Twitter, they probably ought to open source their code and allow outsiders to find and fix security vulnerabilities, freeing up Twitter engineers to figure out how in the world to generate revenue for the service.
- jonny_eh 4y agoFor client code sure. Not server code that protects user data that could be exploited with a 0-day exploit.
- lapcat 4y agoLinux is open source. PHP is open source. Mastodon is open source. Ruby on Rails, WordPress, ssh. I'm sure I'm forgetting a bunch of things too.
- brianwawok 4y agoRight. Now go work for a f500. Ask if you can post your source code on GitHub to improve security? There isn’t some magic thing that posting your source does, except in the short term make 0 days 10000x easier.
- reaperducer 4y agoRight. Now go work for a f500. Ask if you can post your source code on GitHub to improve security? There isn’t some magic thing that posting your source does, except in the short term make 0 days 10000x easier. Doesn't seem to stop Microsoft, IBM, Chase, and others.
- jonny_eh 4y agoPlease share the Windows or Xbox Live source code.
- brianwawok 4y agoOr the Chase bank web code. Or the Chase bank backend processing code. Or the Chase bank fraud protection code.
- wmf 4y agoCode that's intentionally open source tends to have better security long-term. Proprietary code that was accidentally leaked is pretty bad for security in the short term.
- sverhagen 4y ago> and allow outsiders to find and fix security vulnerabilities, freeing up Twitter engineers to figure out how ...to boost Musk's tweets.