3 ms·
The third part of my post here [1] is that progress in security will more likely come from cheap tools than expensive humans. Pardon the self-reference of cours
by mwsherman 12y ago
The third part of my post here [1] is that progress in security will more likely come from cheap tools than expensive humans. Pardon the self-reference of course. :)
[1] http://clipperhouse.com/2015/04/04/liquidity-open-source-and-security/ http://clipperhouse.com/2015/04/04/liquidity-open-source-and...
- jjarmoc 12y ago... and where do the tools come from? Tools are either made by expensive humans, or forged by the Dark Lord Sauron in the fires of Mount Doom. There's also the matter of who will run those tools. It's not like fuzzers output exploit.sh or something. Automation and tooling are great, but they aren't replacements for human ingenuity.
- mwsherman 12y agoOh no doubt, but tools scale well. The tools allow us to partially but cheaply replicate the brains of the expensive smart people.
- davidgerard 12y agoProgress in maintaining huge codebases in general. OpenSSL is ridiculously large for too few maintainers, but you should be so lucky as to have a codebase of maintainable size for the coders you have. My favourite example remains LibreOffice, where the coders are very good but there are too few of them - so they hit the automated tools, static checkers, clang plugins etc really hard.