| ▲ | bzzzt an hour ago | |
It's got nothing to do with the licensing, but it used to be 'with enough eyes all bugs are shallow' for code developed in the open. Now, open code allows anyone with tokens to burn to analyze it for hidden weaknesses. That makes publishing code a risky move unless you've already invested a lot of effort in securing it. | ||
| ▲ | ben_w 40 minutes ago | parent | next [-] | |
Agents seem to be* getting better at decompiling; if that appearance is true, binaries are vulnerable in a similar way to source code. * I don't know how useful any of the specific benchmarks on this are, so I'm only saying "seem to be" | ||
| ▲ | insanitybit 41 minutes ago | parent | prev [-] | |
> 'with enough eyes all bugs are shallow' This was always nonsense. It assumes that the eyes know what they're looking at. Most people don't know how to look at code and see attack paths. | ||