Into the Borg – SSRF inside Google production network

Re:Into the Borg – SSRF inside Google production network by jsnell on Saturday July 21, 2018 @01:28PM (#17582784)

What's the size of the transitive dependency graph of Borg? 10MLOC? 50MLOC? 100MLOC? I have no idea. But it's a lot of code no matter what. Open sourcing that much code is a huge undertaking, unless you're just planning to throw it over the wall with no expectation of external people working on it.

On the other hand starting from scratch you get to grow the community and the codebase in lockstep.

[ Parent | on HN ]

Re:Into the Borg – SSRF inside Google production network by repolfx on Sunday July 22, 2018 @07:51AM (#17586303)

It may be a large undertaking but yes, it's clearly still less work to release code that exists and build a community around it, than rewrite it all from scratch and also build a community around that too.

[ Parent | on HN ]

Re:Into the Borg – SSRF inside Google production network by gpshead on Monday July 23, 2018 @06:55PM (#17596706)

You just filled up my BINGO card by saying "clearly" to indicate that you have no idea what you are talking about.

[ Parent | on HN ]

Re:Into the Borg – SSRF inside Google production network by repolfx on Tuesday July 24, 2018 @08:47AM (#17600495)

I've worked at Google for many years, and built open source communities based on code I've written from scratch several times. This is not an area I'm inexperienced in.

[ Parent | on HN ]