4 ms·
No, proper easter eggs don't introduce security issues, they're benign almost by definition. I think what made them disappear was the introduction of all the su
by embedding-shape 7mo ago
No, proper easter eggs don't introduce security issues, they're benign almost by definition. I think what made them disappear was the introduction of all the suit-wearing people who decide what the programmers are supposed to program, with no room for autonomous work within that.
- jedberg 7mo ago> proper easter eggs don't introduce security issues Proper code doesn't either, and yet there they are! The point is they added another attack surface, however small, and another code path that should be tested. When people started to care about 100% test coverage, they started to disappear.
- embedding-shape 7mo ago> The point is they added another attack surface, however small, and another code path that should be tested. I dunno, "attack surface" to me means "facilitate opening/vulnerability somehow" and none of the easter egg code I've seen has done that. You have any concrete examples where a easter egg made possible a security vulnerability that wouldn't be possible otherwise? But yes, another code path created by easter eggs that wasn't tested I've seen countless of times, but never been an issue, but maybe our easter eggs always been too small in scope for that.
- jedberg 7mo agoThe most famous is the Xbox hack that was only possible because of an Easter Egg: https://security.stackexchange.com/questions/144202/are-there-any-known-exploits-that-come-from-easter-eggs https://security.stackexchange.com/questions/144202/are-ther...
- hulitu 7mo agoMicrosoft code. The "hacker" went for the lower hanging fruit.