3 ms·
> Open sourcing might lay bare some flaws which could be fixed. Or it might lay bare some flaws which could be exploited. If there are flaws(, and there are!)
by sorrythanks 2y ago
> Open sourcing might lay bare some flaws which could be fixed. Or it might lay bare some flaws which could be exploited.
If there are flaws(, and there are!) it might be preferable to have the chance to learn about them from grumpy security open source contributors than after the exploit
- rendaw 2y agoHow would you ensure that grumpy security open source contributors see them and not hackers?
- uneekname 2y agoYou post it on HN first where all the grumpy security open source contributors congregate.
- sorrythanks 2y agoIf you show the source you'll be showing it to both. If you don't, hackers will still go poking around anyway. They'll find the exploits the old fashioned way.
- xp84 2y agoThe grumpy OSS contributors become the hackers after dark, so just make sure you post the source code in the morning and you’ll be fine.